tyler.durden/icingaweb2-module-director
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2-module-director.git synced 2025-07-28 08:14:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

IcingaCommandForm: Add warning for command as plain string

Browse Source
This commit is contained in:
Markus Frosch 2019-03-26 11:38:04 +01:00
parent 6a79436af3
commit e64ace7ccf
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
application/forms/IcingaCommandForm.php
View File

@ -76,8 +76,9 @@ class IcingaCommandForm extends DirectorObjectForm
$descIsString = [ $descIsString = [
$this->translate('Render the command as a plain string instead of an array.'), $this->translate('Render the command as a plain string instead of an array.'),
$this->translate('This can not be used together with arguments.'), $this->translate('If enabled you can not define arguments.'),
$this->translate('It is disabled by default and should only be used in rare cases.'), $this->translate('Disabled by default, and should only be used in rare cases.'),
$this->translate('WARNING, this can allow shell script injection via custom variables used in command.'),
]; ];
$this->addBoolean( $this->addBoolean(