Uplandustries/WebConsole-Client-v2.4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve command whitelist checker.

Browse Source
This commit is contained in:
awesomemoder316 2021-08-17 21:01:07 -07:00
parent 0cb3156186
commit 05e2706fa9
1 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/es/mesacarlos/webconsole/websocket/command/ExecCommand.java
View File

@ -37,14 +37,25 @@ public class ExecCommand implements WSCommand {
break;
}
String[] splitCommand = command.split(" ");
for (String whitelistedCommand : ud.getWhitelistedCommands()) {
if (command.toLowerCase().startsWith(whitelistedCommand)) {
String[] splitWhitelistedCommand = whitelistedCommand.split(" ");
if (!ud.isWhitelistActsAsBlacklist()) allowCommand = true; //cmd is whitelisted.
for (int x = 0; x < splitWhitelistedCommand.length; x ++) {
if (!ud.isWhitelistActsAsBlacklist()) {
if (splitCommand[x].equalsIgnoreCase(splitWhitelistedCommand[x])) { //cmd is whitelisted.
allowCommand = true;
continue;
}
allowCommand = false;
break;
}
}
}
if (!allowCommand //Check if was detected by whitelist
&& ud.isWhitelistActsAsBlacklist()) allowCommand = true; //cmd is not blacklisted.