Make sure clear= values are checked

2022-04-23 15:23:18 -04:00 · 2022-04-23 15:23:18 -04:00 · 9c91ae2744
parent 882f027f6c
commit 9c91ae2744
1 changed files with 3 additions and 0 deletions
--- a/server/util.go
+++ b/server/util.go
@ -126,6 +126,9 @@ func parseActionsFromSimple(s string) ([]*action, error) {
 					newAction.Label = value
 				case "clear":
 					lvalue := strings.ToLower(value)
+					if !util.InStringList([]string{"true", "yes", "1", "false", "no", "0"}, lvalue) {
+						return nil, wrapErrHTTP(errHTTPBadRequestActionsInvalid, "'clear=%s' not allowed", value)
+					}
 					newAction.Clear = lvalue == "true" || lvalue == "yes" || lvalue == "1"
 				case "url":
 					newAction.URL = value