yetangitu/OpenSTF
1
0
Fork 0
mirror of https://github.com/openstf/stf synced 2025-10-05 10:39:25 +02:00
Code Issues Releases Wiki Activity

revert due to injection

Browse source
This commit is contained in:
Takashi Hasegawa 2017-06-15 10:02:23 +09:00
parent 89878d070f
commit 8e56ef9d16
1 changed files with 17 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

25
lib/util/ldaputil.js
View file

@ -44,16 +44,25 @@ module.exports.login = function(options, username, password) {
function tryFind(client) {
var resolver = Promise.defer()
var filter = `&(objectClass=${options.search.objectClass})` +
`(${options.search.field}=${username})`
if (typeof options.search.filter !== 'undefined') {
filter += `${options.search.filter}`
}
var query = {
scope: options.search.scope
, filter: ldap.parseFilter(`(${filter})`)
, filter: new ldap.AndFilter({
filters: [
new ldap.EqualityFilter({
attribute: 'objectClass'
, value: options.search.objectClass
})
, new ldap.EqualityFilter({
attribute: options.search.field
, value: username
})
]
})
}
if (typeof options.search.filter !== 'undefined') {
var parsedFilter = ldap.parseFilter(options.search.filter)
query.filter.filters.push(parsedFilter)
}
client.search(options.search.dn, query, function(err, search) {