[mapserver-dev] Question about the bad mapfile pattern (vulnerability) check

Steve Lime sdlime at gmail.com
Fri Feb 25 14:51:44 PST 2022


Thinking about this more for 8.0. Since MS_MAP_PATTERN is required now (via
config file), perhaps the default value for MS_MAP_BAD_PATTERN can just
limit back references...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapserver-dev/attachments/20220225/04d02d44/attachment.html>


More information about the MapServer-dev mailing list