0000126: Validate mirror_list.txt a bit more.

ID	Project	Category	View Status	Date Submitted	Last Update

0000126	apt-panopticon	TODO	public	2019-11-01 05:49	2019-12-23 03:33

Reporter	onefang	Assigned To	onefang
Priority	high	Severity	major	Reproducibility	N/A
Status	resolved	Resolution	fixed
Target Version	0.1	Fixed in Version	0.1

Summary	0000126: Validate mirror_list.txt a bit more.
Description	It's external input.
Tags	No tags attached.

onefang 2019-11-15 04:05 administrator ~0000230	Input validation - I need to remove anything that might turn into a Lua assignment (=), or a Lua function call ((){}[[]]). Probably should remove any module loading stuff to. Output validation - I need to remove anything that'll screw with URLs badly. Check FDQN / first part of BaseURL before the slash. Check bit after the BaseURL slash is only a path. Check "Protocols" is well formed and only includes the protocols we care about.

Date Modified	Username	Field	Change
2019-11-01 05:49	onefang	New Issue
2019-11-01 05:49	onefang	Status	new => assigned
2019-11-01 05:49	onefang	Assigned To	=> onefang
2019-11-06 12:55	onefang	Summary	Validate mirrors.txt a bit more. => Validate mirror_list.txt a bit more.
2019-11-15 04:05	onefang	Note Added: 0000230
2019-12-23 03:33	onefang	Status	assigned => resolved
2019-12-23 03:33	onefang	Resolution	open => fixed
2019-12-23 03:33	onefang	Fixed in Version	=> 0.1