Adding ldap.EscapeFilter

- Prevents break search filter strings with special characters - go-ldap/ldap#338 (comment)
wiltonsr · Nov 3, 2022 · d27cc40 · d27cc40
1 parent 2a89abe
commit d27cc40
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ldapauth.go b/ldapauth.go
@@ -268,7 +268,7 @@ func LdapCheckUserGroups(conn *ldap.Conn, config *Config, entry *ldap.Entry, use
 			"(member=%s)"+
 			"(uniqueMember=%s)"+
 			"(memberUid=%s)"+
-			")", entry.DN, entry.DN, username)
+			")", ldap.EscapeFilter(entry.DN), ldap.EscapeFilter(entry.DN), ldap.EscapeFilter(username))
 
 		LoggerDEBUG.Printf("Searching Group: '%s' with User: '%s'", g, entry.DN)