🐛 Bug Description
The text input field allows the user to enter any command instead of just the name of the folder.
📱 Environment
- sysAdmin version: 1.1.1
- Android/iOS version: Android 15
- Device model: Samsung Galaxy S21
- Server OS: Debian 12
🔄 Steps To Reproduce
- Connect to server
- Enter file explorer and go to a location where you can create folders
- Press "Create folder"
- Enter a name followed by a command, e.g.
folder_name1 mkdir folder2_name
🧐 Expected Behavior
Only one folder with the name folder_name1 mkdir folder2_name should get created.
🚨 Actual Behavior
Injected command gets triggered. In the described example two folders get created, folder_name1 and folder_name2.
🐛 Bug Description
The text input field allows the user to enter any command instead of just the name of the folder.
📱 Environment
🔄 Steps To Reproduce
folder_name1 mkdir folder2_name🧐 Expected Behavior
Only one folder with the name
folder_name1 mkdir folder2_nameshould get created.🚨 Actual Behavior
Injected command gets triggered. In the described example two folders get created,
folder_name1andfolder_name2.