limit the update-check.cgi to parse for cmd=download and not parse ar…

…bitrary query string options.
homematic-community · Jun 17, 2022 · 021f2a0 · 021f2a0
1 parent 66c58ac
commit 021f2a0
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.7.3
+1.7.4
diff --git a/www/update-check.cgi b/www/update-check.cgi
@@ -7,8 +7,9 @@ catch {
   set input $env(QUERY_STRING)
   set pairs [split $input &]
   foreach pair $pairs {
-    if {0 != [regexp "^(\[^=]*)=(.*)$" $pair dummy varname val]} {
-      set $varname $val
+    if {$pair == "cmd=download"} {
+      set cmd "download"
+      break
     }
   }
 }