Browse Source

Try to fix Unescaped char in CN at LDAP, by updating to ldapjs to 2.3.3 and adding escape.

Thanks to xUndero, mfilser, gramakri and xet7 !

Fixes #4754
Lauri Ojansivu 2 years ago
parent
commit
743d9d2be8
3 changed files with 555 additions and 255 deletions
  1. 553 253
      package-lock.json
  2. 1 1
      package.json
  3. 1 1
      packages/wekan-ldap/server/ldap.js

File diff suppressed because it is too large
+ 553 - 253
package-lock.json


+ 1 - 1
package.json

@@ -44,7 +44,7 @@
     "jquery-ui": "^1.13.0",
     "jquery-ui-touch-punch": "^0.2.3",
     "jszip": "^3.7.1",
-    "ldapjs": "^2.3.1",
+    "ldapjs": "^2.3.3",
     "markdown-it": "^12.3.2",
     "markdown-it-emoji": "^2.0.0",
     "markdown-it-mathjax3": "^4.3.1",

+ 1 - 1
packages/wekan-ldap/server/ldap.js

@@ -29,7 +29,7 @@ export default class LDAP {
       User_Authentication                : this.constructor.settings_get('LDAP_USER_AUTHENTICATION'),
       User_Authentication_Field          : this.constructor.settings_get('LDAP_USER_AUTHENTICATION_FIELD'),
       User_Attributes                    : this.constructor.settings_get('LDAP_USER_ATTRIBUTES'),
-      User_Search_Filter                 : this.constructor.settings_get('LDAP_USER_SEARCH_FILTER'),
+      User_Search_Filter                 : escapedToHex(this.constructor.settings_get('LDAP_USER_SEARCH_FILTER')),
       User_Search_Scope                  : this.constructor.settings_get('LDAP_USER_SEARCH_SCOPE'),
       User_Search_Field                  : this.constructor.settings_get('LDAP_USER_SEARCH_FIELD'),
       Search_Page_Size                   : this.constructor.settings_get('LDAP_SEARCH_PAGE_SIZE'),

Some files were not shown because too many files changed in this diff