From ded0dc34e1284c5138625583b9a76366f0600b3c Mon Sep 17 00:00:00 2001
From: Nick Porter <nick@portercomputing.co.uk>
Date: Fri, 22 Sep 2023 10:19:36 +0100
Subject: [PATCH] Tainted data doesn't work here

- the escape function expects a URI, not just a DN
- escaping cn= makes cn\3d - so the DN becomes invalid
---
 src/tests/modules/ldap/xlat_profile.unlang | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/tests/modules/ldap/xlat_profile.unlang b/src/tests/modules/ldap/xlat_profile.unlang
index 58486e2ddc540..a79cadee34144 100644
--- a/src/tests/modules/ldap/xlat_profile.unlang
+++ b/src/tests/modules/ldap/xlat_profile.unlang
@@ -10,6 +10,8 @@ if (!((&reply.Framed-IP-Netmask == 255.255.0.0) && \
 	test_fail
 }
 
-if (!%(ldap.profile:%{taint:cn=suspended,ou=profiles,dc=example,dc=com})) {
+if (!%(ldap.profile:cn=suspended,ou=profiles,dc=example,dc=com)) {
       test_fail
 }
+
+test_pass