From 50e7e4ff6d87a6f1523fa800818c91b59005853d Mon Sep 17 00:00:00 2001
From: Michael <m.muenz@gmail.com>
Date: Tue, 16 Jul 2019 07:53:12 +0200
Subject: [PATCH] net/frr: add input validation to prefix-lists and route-maps
 (#1411)

---
 net/frr/Makefile                                            | 2 +-
 net/frr/pkg-descr                                           | 1 +
 net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml | 4 ++++
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/net/frr/Makefile b/net/frr/Makefile
index 2f72a9c29..fdda857f1 100644
--- a/net/frr/Makefile
+++ b/net/frr/Makefile
@@ -1,6 +1,6 @@
 PLUGIN_NAME=		frr
 PLUGIN_VERSION=		1.11
-PLUGIN_REVISION=        2
+PLUGIN_REVISION=        3
 PLUGIN_COMMENT=		The FRRouting Protocol Suite
 PLUGIN_DEPENDS=		frr6 ruby
 PLUGIN_MAINTAINER=	franz.fabian.94@gmail.com
diff --git a/net/frr/pkg-descr b/net/frr/pkg-descr
index bacd5717d..244bf743d 100644
--- a/net/frr/pkg-descr
+++ b/net/frr/pkg-descr
@@ -14,6 +14,7 @@ Plugin Changelog
 1.11
 
 * Add route-map support to redistribution in OSPF
+* Only allow custom set of characters in BGP prefix-lists and route-maps
 
 1.10
 
diff --git a/net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml b/net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml
index bafd567c5..9a553b204 100644
--- a/net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml
+++ b/net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml
@@ -155,6 +155,8 @@
                         <name type="TextField">
                                 <default></default>
                                 <Required>Y</Required>
+                                <mask>/^[a-zA-Z0-9._-]{1,64}$/</mask>
+                                <ValidationMessage>The name should only contain alphanumeric characters, dashes, underscores or a dot.</ValidationMessage>
                         </name>
                         <version type="OptionField">
                                 <default>IPv4</default>
@@ -193,6 +195,8 @@
                         <name type="TextField">
                                 <default></default>
                                 <Required>Y</Required>
+                                <mask>/^[a-zA-Z0-9._-]{1,64}$/</mask>
+                                <ValidationMessage>The name should only contain alphanumeric characters, dashes, underscores or a dot.</ValidationMessage>
                         </name>
                         <action type="OptionField">
                                 <default></default>