summaryrefslogtreecommitdiffstats
path: root/lib/Plugins
diff options
context:
space:
mode:
authorDenys Vlasenko <vda.linux@googlemail.com>2010-06-30 11:58:28 +0200
committerDenys Vlasenko <vda.linux@googlemail.com>2010-06-30 11:58:28 +0200
commit842d1a6d7ab1fe62c6e9bce6d776b0d73dab0e23 (patch)
treef59748398960260fd054417410a66e60b8ef9deb /lib/Plugins
parent254a8f7bd6af10906b7f99c51da7fcdae96192ff (diff)
downloadabrt-842d1a6d7ab1fe62c6e9bce6d776b0d73dab0e23.tar.gz
abrt-842d1a6d7ab1fe62c6e9bce6d776b0d73dab0e23.tar.xz
abrt-842d1a6d7ab1fe62c6e9bce6d776b0d73dab0e23.zip
abrt_rh_support: improve error messages a bit more.
Also, allow " in saved messages. Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'lib/Plugins')
-rw-r--r--lib/Plugins/SQLite3.cpp4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/Plugins/SQLite3.cpp b/lib/Plugins/SQLite3.cpp
index 74d2dcdb..499346f4 100644
--- a/lib/Plugins/SQLite3.cpp
+++ b/lib/Plugins/SQLite3.cpp
@@ -52,7 +52,7 @@ static bool is_string_safe(const char *str)
// it does not unescape escaped ones - I see lines ending with \ when I do it.
// I wonder whether this is a bug in SQLite, and whether using unescaped
// newlines is a danger with other SQL servers.
-// For now, I disabled newline escaping...
+// For now, I disabled newline escaping, and also allowed double quote.
const char *p = str;
while (*p)
{
@@ -63,7 +63,7 @@ static bool is_string_safe(const char *str)
// continue;
// }
if ((c < ' ' && c != '\n')
- || strchr("\\\"\'", c)
+ || strchr("\\\'", c) //was: "\\\"\'"
) {
error_msg("Probable SQL injection: '%s'", str);
return false;