Test if supplied IP address is valid dot-decimal format

2017-02-05 05:28:30 +00:00
parent 06263790c8
commit 59fecdcce3
1 changed files with 4 additions and 1 deletions
--- a/core/main/rest/api.rb
+++ b/core/main/rest/api.rb
@@ -66,7 +66,10 @@ module BeEF
        # get permitted subnet 
        permitted_ui_subnet = BeEF::Core::Configuration.instance.get("beef.restrictions.permitted_ui_subnet")
        target_network = IPAddr.new(permitted_ui_subnet)
-        
+
+        # test if supplied IP address is valid dot-decimal format
+        return false unless ip =~ /\A[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\z/
+
        # test if ip within subnet
        return target_network.include?(ip)
      end