Unrud 4bfe7c9f79 Prevent "regex injection" ...

If an attacker is able to authenticate with a user name like .* he can bypass limitations imposed by "owner_write" and "owner_only".

2015-12-23 07:05:20 +01:00

..

__init__.py

Remove the backend/type split for rights in configuration

2014-02-05 14:11:40 +01:00

regex.py

Prevent "regex injection"

2015-12-23 07:05:20 +01:00