From e800097d0c287bb665f0751a98a67c75ef7b45e5 Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Mon, 3 Jul 2023 09:22:21 +0200 Subject: [PATCH] System/Settings/Cron - improve escaping in /var/cron/tabs/nobody generation. --- src/opnsense/service/templates/OPNsense/Cron/user.cron | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/opnsense/service/templates/OPNsense/Cron/user.cron b/src/opnsense/service/templates/OPNsense/Cron/user.cron index d693d15b0..424b6d407 100644 --- a/src/opnsense/service/templates/OPNsense/Cron/user.cron +++ b/src/opnsense/service/templates/OPNsense/Cron/user.cron @@ -10,9 +10,9 @@ PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin {% for job in helpers.toList('OPNsense.cron.jobs.job') %} {% if job.enabled|default('0') == '1' %} # Origin/Description: {{job.origin}}/{{job.description}} -{{job.minutes}} {{job.hours}} {{job.days}} {{job.months}} {{job.weekdays}} /usr/local/sbin/configctl -d {{job.command}}{% +{{job.minutes}} {{job.hours}} {{job.days}} {{job.months}} {{job.weekdays}} /usr/local/sbin/configctl -d {{job.command|replace("\n", "")|shlex_quote}}{% if job.parameters %}{% - for param in job.parameters|shlex_split %} {{param|shlex_quote}}{% + for param in job.parameters|shlex_split %} {{param|replace("\n", "")|shlex_quote}}{% endfor %}{% endif %} {% endif %}