Test if supplied IP address is valid dot-decimal format

2017-02-04 22:20:48 +00:00
parent ce849dc12a
commit 06263790c8
1 changed files with 2 additions and 1 deletions
--- a/extensions/admin_ui/controllers/authentication/authentication.rb
+++ b/extensions/admin_ui/controllers/authentication/authentication.rb
@@ -109,7 +109,8 @@ class Authentication < BeEF::Extension::AdminUI::HttpController
    config = BeEF::Core::Configuration.instance
    permitted_ui_subnet = config.get('beef.restrictions.permitted_ui_subnet')
    target_network = IPAddr.new(permitted_ui_subnet)
-    
+    # test if supplied IP address is valid dot-decimal format
+    return false unless ip =~ /\A[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\z/
    # test if ip within subnet
    return target_network.include?(ip)
  end