v6.1.1.0

Change log: https://roxy-wi.org/changelog.py#6_1_1
2022-07-08 21:59:15 +03:00 · 2022-07-08 21:59:15 +03:00 · 791802ee02
parent 82666df1e6
commit 791802ee02
1 changed files with 5 additions and 3 deletions
--- a/app/funct.py
+++ b/app/funct.py
@ -30,12 +30,14 @@ def is_ip_or_dns(server_from_request: str) -> str:
 		return ''


-def checkAjaxInput(ajax_input: str) -> bool:
+def checkAjaxInput(ajax_input: str) -> str:
 	pattern = re.compile('[&;|$`]')
 	if pattern.search(ajax_input):
-		return True
+		print('error: nice try')
+		sys.exit()
 	else:
-		return False
+		from shlex import quote
+		return quote(ajax_input)


 form = cgi.FieldStorage()