Glitches in the expr engine?

[Arran Cudbard-Bell]

> On Mar 7, 2017, at 11:15 AM, Stefan Paetow <Stefan.Paetow at jisc.ac.uk> wrote:
> 
>>> Everything so far, so good. Then I ask him to use a random string as the
>>> salt (which contained a closing curly bracket). The output was definitely
>>> *not* what was expected. This example below (salt = 'changeme}')
>>> illustrates the problem:
>> 
>> Yes, you need to escape curly close braces in xlat expansions.
> 
> Would it be safe to say that if I add another check into the output to send a reject if the output contains a { or a } (which it never should), it should be acceptable?

I'm pretty sure it's only an issue if it's '}'.  But sure...

-Arran

Arran Cudbard-Bell
FreeRADIUS Core Developer

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20170307/1c5ac04f/attachment.sig>