Opened 5 years ago

Closed 4 years ago

#4627 closed defect (wontfix)

TorCtl doesn't handle quoted passwords

Reported by: atagar Owned by:
Priority: Very Low Milestone:
Component: Torctl Version:
Severity: Keywords: easy
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


The TorCtl authenticate_password passes the password directly to the control socket without escaping quotes. For more information see...

Fixing this should be as simple as uncommenting the hex translation or doing...
secret = secret.replace('"', '

Child Tickets

Change History (1)

comment:1 Changed 4 years ago by atagar

  • Resolution set to wontfix
  • Status changed from new to closed

Not important to TorFlow. Resolving.

Note: See TracTickets for help on using tickets.