If you want to go for it, it probably make sense to adapt a flag based
parameter for the check. Something like:
- flag 1: skip From Name
- flag 2: skip To Name
- ..
Use e.g. like this: secf_check_sqli_all("3") to skip checking From and To Name.
--
Reply to this email directly or view it on GitH
Thomas, I think it might be interesting to avoid the check in the From Name,
can you write the PR?
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3984#issuecomment-2376393149
You are receiving this because you are subscribed to this thread.
Mes
Right now it is possible to check only some of the headers you are interested
in using: secf_check_sqli_hdr($ua);
The function secf_check_sqli_all(); checks all the headers and, it is true that
in the From Name header check, the double quotes are omitted, but I forgot to
omit the single quotes,
Ok, if its supposed to be excluded from the Name fields, then surely it just
can be fixed. Would be probably good to add a sentence to the documentation
about it that the Names are less thouroughly checked.
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamail
Hi team, i got this issue when i change network connection
connect and disconnect wifi or lan
this is log
09-25 11:31:17.826 4510 4510 E kamailio: ERROR:
[core/tcp_main.c:3955]: handle_new_connect(): error while accepting
connection(22): Invalid argument
09-25 11:31:22.019 4510 4510 I chatt
### Description
`secf_check_sqli_all();` block requests when a single quote is present in From
name :
```
From: "O'Reilly" ;tag=abcd
```
Since single quotes are frequent in names.
It makes it difficult to use this function.
### Possible Solutions
A solution would be to skip single quote check
I think the purpose of the secf_check_sqli_all() function is to prevent
characters related to SQL injection, not to check for valid SIP syntax. In this
context the filtering of single quotes is necessary. So this function is
probably not useful for your purpose then. If you are concerned about b
### Description
I followed the page 18~23 of this slide
[20-Federico.Cabiddu-Kamailio-In-A-Mobile-World](https://www.kamailio.org/events/2015-KamailioWorld/Day2/20-Federico.Cabiddu-Kamailio-In-A-Mobile-World.pdf)
to implement suspension & push notification, it worked well on mobile devices.
H
Closed #3877.
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/3877#event-14424809910
You are receiving this because you are subscribed to this thread.
Message ID: ___
Kamailio (SER) - Development Mailing
