Re: [exim] 4.94 - taint - generic workaround

2020-07-20 Thread Evgeniy Berdnikov via Exim-users
On Mon, Jul 20, 2020 at 11:05:46AM +0200, Marcin Gryszkalis via Exim-users wrote: > On 19.07.2020 23:00, Evgeniy Berdnikov via Exim-users wrote: > > On Sun, Jul 19, 2020 at 08:28:34PM +0200, Marcin Gryszkalis via ... > > ${lookup {string} nwildlsearch,ret=key {/run/detaint}\ > >

Re: [exim] 4.94 - taint - generic workaround

2020-07-20 Thread Marcin Gryszkalis via Exim-users
On 19.07.2020 23:00, Evgeniy Berdnikov via Exim-users wrote: > On Sun, Jul 19, 2020 at 08:28:34PM +0200, Marcin Gryszkalis via Exim-users wrote: >> select regexp_replace('${quote_mysql:$authenticated_id}', >> '[^A-Za-z0-9_.-]', '') }}/${tod_logfile} >> >> I know I could just use >> file =

Re: [exim] 4.94 - taint - generic workaround

2020-07-19 Thread Evgeniy Berdnikov via Exim-users
On Sun, Jul 19, 2020 at 08:28:34PM +0200, Marcin Gryszkalis via Exim-users wrote: > select regexp_replace('${quote_mysql:$authenticated_id}', > '[^A-Za-z0-9_.-]', '') }}/${tod_logfile} > > I know I could just use > file = /archive/from-${lookup mysql { > select

[exim] 4.94 - taint - generic workaround

2020-07-19 Thread Marcin Gryszkalis via Exim-users
Hi I'm testing 4.94 for possible issues regarding recent tainting changes - and found one similar to one discussed in other thread but a bit different (more info below). It seems that Jeremy is all against creating generic string detaint - but I don't agree and I still needed quick workaround so