aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rwxr-xr-xkiss11
1 files changed, 11 insertions, 0 deletions
diff --git a/kiss b/kiss
index 5cd8cb4..c84baac 100755
--- a/kiss
+++ b/kiss
@@ -845,6 +845,17 @@ args() {
# arguments despite trapping the error ('|| :').
shift "$(($# > 0 ? 1 : 0))"
+ # Unless this is a search, sanitize the user's input. The call to
+ # 'pkg_find()' supports basic globbing, ensure input doesn't expand
+ # to anything except for when this behavior is needed.
+ [ "$action" != search ] && [ "$action" != s ] &&
+ case $* in
+ *[!a-zA-Z0-9_-]*)
+ log kiss "$action $*"
+ die "Arguments contain invalid characters"
+ ;;
+ esac
+
# Parse some arguments earlier to remove the need to duplicate code.
case $action in
c|checksum|s|search)