-
Lubomir Rintel authored
The vpnc configuration format doesn't allow those. vpnc(8): The values start exactly one space after the keywords, and run to the end of line. This lets you put any kind of weird character (except CR, LF and NUL) in your strings We have no choice but to reject them. If we didn't it would allow the user to inject arbitrary configuration directives with potential security implications. https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc Reported by: Denis Andzakovic
07ac18a3