[projects/pld-builder.new] request: allow COMMAND

arekm arekm at pld-linux.org
Thu Aug 27 12:26:27 CEST 2026


commit 5f7c618ad216240b9c8de97e7b982ad30e80c9e2
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Thu Aug 27 12:19:20 2026 +0200

    request: allow COMMAND

 PLD_Builder/request.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/PLD_Builder/request.py b/PLD_Builder/request.py
index b6c723d..dcad7e1 100644
--- a/PLD_Builder/request.py
+++ b/PLD_Builder/request.py
@@ -222,7 +222,7 @@ class Batch:
                 # normalize specname, specname is used as buildlog and we don't
                 # want to be exposed to directory traversal attacks
                 self.spec = text(c).split('/')[-1]
-                if not re.match(r"^[a-zA-Z0-9_+][a-zA-Z0-9._+-]*\.spec$", self.spec):
+                if self.spec != "COMMAND" and not re.match(r"^[a-zA-Z0-9_+][a-zA-Z0-9._+-]*\.spec$", self.spec):
                     log.panic("xml: evil spec name (%s)" % self.spec)
             elif c.nodeName == "command":
                 self.spec = "COMMAND"
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/projects/pld-builder.new.git/commitdiff/5f7c618ad216240b9c8de97e7b982ad30e80c9e2



More information about the pld-cvs-commit mailing list