dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add some string escaping to handle transcription providers

Browse Source
This commit is contained in:
Dan
2018-10-26 23:15:06 -07:00
parent 098fcf5f34
commit 5bbd0e6d66
1 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/install/scripts/app/voicemail/resources/functions/record_message.lua
+17 -1
View File
@@ -38,6 +38,22 @@
end) end)
end end
--define escape function (prevents lua injection attacks)
local function esc(x)
return (x:gsub('%%', '%%%%')
:gsub('^%^', '%%^')
:gsub('%$$', '%%$')
:gsub('%(', '%%(')
:gsub('%)', '%%)')
:gsub('%.', '%%.')
:gsub('%[', '%%[')
:gsub('%]', '%%]')
:gsub('%*', '%%*')
:gsub('%+', '%%+')
:gsub('%-', '%%-')
:gsub('%?', '%%?'))
end
local function transcribe(file_path,settings,start_epoch) local function transcribe(file_path,settings,start_epoch)
--transcription variables --transcription variables
if (os.time() - start_epoch > 2) then if (os.time() - start_epoch > 2) then
@@ -106,7 +122,7 @@
if (transcription_server ~= '') then if (transcription_server ~= '') then
transcribe_cmd = "curl -L " .. transcription_server .. " -F file=@"..file_path transcribe_cmd = "curl -L " .. transcription_server .. " -F file=@"..file_path
local handle = io.popen(transcribe_cmd); local handle = io.popen(transcribe_cmd);
local transcribe_result = handle:read("*a"); local transcribe_result = esc(handle:read("*a"));
handle:close(); handle:close();
if (debug["info"]) then if (debug["info"]) then
freeswitch.consoleLog("notice", "[voicemail] CMD: " .. transcribe_cmd .. "\n"); freeswitch.consoleLog("notice", "[voicemail] CMD: " .. transcribe_cmd .. "\n");