limit the update-check.cgi to parse for cmd=download and not parse ar…

…bitrary query string options.
homematic-community · Jun 17, 2022 · 94651d0 · 94651d0
1 parent be69f35
commit 94651d0
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-2.4
+2.5
diff --git a/www/update-check.cgi b/www/update-check.cgi
@@ -7,8 +7,9 @@ catch {
   set input $env(QUERY_STRING)
   set pairs [split $input &]
   foreach pair $pairs {
-    if {0 != [regexp "^(\[^=]*)=(.*)$" $pair dummy varname val]} {
-      set $varname $val
+    if {$pair == "cmd=download"} {
+      set cmd "download"
+      break
     }
   }
 }