cwx/op-packages
1
0 Fork 0
mirror of https://github.com/kiddin9/op-packages.git synced 2026-10-31 16:35:13 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #6 from anupamme/fix-repo-op-packages-autoban-command-injection-v001

Browse Source 
fix: use subprocess instead of os.system in autoban.py
This commit is contained in:
kiddin9 authored and GitHub committed 2026-09-21 01:37:58 +08:00
2 parents 03ce4c4aef c66ff85c55
commit c734df6a06
1 file changed
+4 -1
Download Patch File Download Diff File Expand all files Collapse all files
luci-app-ssrserver-python/root/usr/share/ssr/utils/autoban.py
+4 -1
View File
@@ -25,9 +25,12 @@ from __future__ import absolute_import, division, print_function, \
with_statement with_statement
import os import os
import re
import sys import sys
import argparse import argparse
_VALID_IP_RE = re.compile(r'^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$')
if __name__ == '__main__': if __name__ == '__main__':
parser = argparse.ArgumentParser(description='See README') parser = argparse.ArgumentParser(description='See README')
parser.add_argument('-c', '--count', default=3, type=int, parser.add_argument('-c', '--count', default=3, type=int,
@@ -45,7 +48,7 @@ if __name__ == '__main__':
sys.stdout.flush() sys.stdout.flush()
else: else:
ips[ip] += 1 ips[ip] += 1
if ip not in banned and ips[ip] >= config.count: if ip not in banned and ips[ip] >= config.count and _VALID_IP_RE.match(ip):
banned.add(ip) banned.add(ip)
cmd = 'iptables -A INPUT -s %s -j DROP' % ip cmd = 'iptables -A INPUT -s %s -j DROP' % ip
print(cmd, file=sys.stderr) print(cmd, file=sys.stderr)