projects
/
project
/
luci.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
treewide: filter shell arguments through shellquote() where applicable
[project/luci.git]
/
modules
/
luci-mod-admin-full
/
luasrc
/
controller
/
admin
/
status.lua
diff --git
a/modules/luci-mod-admin-full/luasrc/controller/admin/status.lua
b/modules/luci-mod-admin-full/luasrc/controller/admin/status.lua
index
4b03a18
..
3a1c169
100644
(file)
--- a/
modules/luci-mod-admin-full/luasrc/controller/admin/status.lua
+++ b/
modules/luci-mod-admin-full/luasrc/controller/admin/status.lua
@@
-62,7
+62,9
@@
end
function action_bandwidth(iface)
luci.http.prepare_content("application/json")
function action_bandwidth(iface)
luci.http.prepare_content("application/json")
- local bwc = io.popen("luci-bwc -i '%s' 2>/dev/null" % iface:gsub("'", ""))
+ local bwc = io.popen("luci-bwc -i %s 2>/dev/null"
+ % luci.util.shellquote(iface))
+
if bwc then
luci.http.write("[")
if bwc then
luci.http.write("[")
@@
-80,7
+82,9
@@
end
function action_wireless(iface)
luci.http.prepare_content("application/json")
function action_wireless(iface)
luci.http.prepare_content("application/json")
- local bwc = io.popen("luci-bwc -r '%s' 2>/dev/null" % iface:gsub("'", ""))
+ local bwc = io.popen("luci-bwc -r %s 2>/dev/null"
+ % luci.util.shellquote(iface))
+
if bwc then
luci.http.write("[")
if bwc then
luci.http.write("[")