tyler.durden
/
icingaweb2-module-director
mirror of https://github.com/Icinga/icingaweb2-module-director.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

IcingaCommandForm: Add warning for command as plain string

This commit is contained in:
Markus Frosch 2019-03-26 11:38:04 +01:00
parent 6a79436af3
commit e64ace7ccf
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
application/forms/IcingaCommandForm.php
View File

@ -76,8 +76,9 @@ class IcingaCommandForm extends DirectorObjectForm
$descIsString = [
$this->translate('Render the command as a plain string instead of an array.'),
$this->translate('This can not be used together with arguments.'),
$this->translate('It is disabled by default and should only be used in rare cases.'),
$this->translate('If enabled you can not define arguments.'),
$this->translate('Disabled by default, and should only be used in rare cases.'),
$this->translate('WARNING, this can allow shell script injection via custom variables used in command.'),
];
$this->addBoolean(