[projects/pld-builder.new] request: allow COMMAND
arekm
arekm at pld-linux.org
Thu Aug 27 12:26:27 CEST 2026
commit 5f7c618ad216240b9c8de97e7b982ad30e80c9e2
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date: Thu Aug 27 12:19:20 2026 +0200
request: allow COMMAND
PLD_Builder/request.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/PLD_Builder/request.py b/PLD_Builder/request.py
index b6c723d..dcad7e1 100644
--- a/PLD_Builder/request.py
+++ b/PLD_Builder/request.py
@@ -222,7 +222,7 @@ class Batch:
# normalize specname, specname is used as buildlog and we don't
# want to be exposed to directory traversal attacks
self.spec = text(c).split('/')[-1]
- if not re.match(r"^[a-zA-Z0-9_+][a-zA-Z0-9._+-]*\.spec$", self.spec):
+ if self.spec != "COMMAND" and not re.match(r"^[a-zA-Z0-9_+][a-zA-Z0-9._+-]*\.spec$", self.spec):
log.panic("xml: evil spec name (%s)" % self.spec)
elif c.nodeName == "command":
self.spec = "COMMAND"
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/projects/pld-builder.new.git/commitdiff/5f7c618ad216240b9c8de97e7b982ad30e80c9e2
More information about the pld-cvs-commit
mailing list