unraid/webgui

Grave accent in variables breaks Docker management

Closed this issue · 2 comments

Using the grave accent (`) character in variable field for containers breaks command execution.

Researching what characters are to be escaped and how exec statements should be filtered might be the way forward for exec statements containing user input.

Thanks for the report. I'll be submitting a correction for this and improving the overall arg escaping for Docker in a bit.

Fixed in 06152c0