[RFC PATCH v2 0/1] Introduce UCI support for configuring DSA VLAN filter rules

Jo-Philipp Wich jo at mein.io
Wed Jul 15 08:18:55 EDT 2020


Hi,

> I'm not sure whether using an asterisk is wise here, as it might pose
> interesting problems when people use scripts to set/evaluate uci
> config (as you have to be extra careful to not have it treated as a
> wildcard.) I'd be happy if we could find another symbol here.

hm, can you elaborate on the problem here? Scripts which use uci values
verbatim without quoting are prone to any kind of shell injection flaws,
not sure if papering over such deficiencies is the way to go here.

~ Jo

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20200715/887e3664/attachment.sig>


More information about the openwrt-devel mailing list