Tainted data doesn't work here

- the escape function expects a URI, not just a DN - escaping cn= makes cn\3d - so the DN becomes invalid
FreeRADIUS · Sep 22, 2023 · ded0dc3 · ded0dc3
1 parent 1c2feff
commit ded0dc3
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/tests/modules/ldap/xlat_profile.unlang b/src/tests/modules/ldap/xlat_profile.unlang
@@ -10,6 +10,8 @@ if (!((&reply.Framed-IP-Netmask == 255.255.0.0) && \
 	test_fail
 }
 
-if (!%(ldap.profile:%{taint:cn=suspended,ou=profiles,dc=example,dc=com})) {
+if (!%(ldap.profile:cn=suspended,ou=profiles,dc=example,dc=com)) {
       test_fail
 }
+
+test_pass