Merge pull request #27 from wiltonsr/ldap-escape-filter

Adding ldap.EscapeFilter
wiltonsr · Nov 3, 2022 · 0f224f6 · 0f224f6
2 parents 2a89abe + d27cc40
commit 0f224f6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ldapauth.go b/ldapauth.go
@@ -268,7 +268,7 @@ func LdapCheckUserGroups(conn *ldap.Conn, config *Config, entry *ldap.Entry, use
 			"(member=%s)"+
 			"(uniqueMember=%s)"+
 			"(memberUid=%s)"+
-			")", entry.DN, entry.DN, username)
+			")", ldap.EscapeFilter(entry.DN), ldap.EscapeFilter(entry.DN), ldap.EscapeFilter(username))
 
 		LoggerDEBUG.Printf("Searching Group: '%s' with User: '%s'", g, entry.DN)