Skip to content

Remove control characters from PMC properties - #194

Merged
Incredible-O merged 1 commit into
mainfrom
security/remove-control-chars-from-pmc-props
Jul 23, 2026
Merged

Remove control characters from PMC properties#194
Incredible-O merged 1 commit into
mainfrom
security/remove-control-chars-from-pmc-props

Conversation

@Incredible-O

Copy link
Copy Markdown
Member

Description

Under certain circumstances, tenant settings values accept newlines, which are passed to the bootstrapper config, then written to ruxitagentproc.conf.
This is problematic because control characters like newlines could let property values inject additional INI sections.

Relevant ticket: ICP-6290.

How can this be tested?

Unit tests

@Incredible-O
Incredible-O requested a review from a team as a code owner July 23, 2026 11:49
@Incredible-O Incredible-O added the security Vulnerabilities or changes to security label Jul 23, 2026
@Incredible-O
Incredible-O added this pull request to the merge queue Jul 23, 2026
Merged via the queue into main with commit 9959172 Jul 23, 2026
9 checks passed
@Incredible-O
Incredible-O deleted the security/remove-control-chars-from-pmc-props branch July 23, 2026 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security Vulnerabilities or changes to security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants