diff --git a/ssh_filter_btrbk.sh b/ssh_filter_btrbk.sh index 5c57409..d4ea193 100755 --- a/ssh_filter_btrbk.sh +++ b/ssh_filter_btrbk.sh @@ -183,6 +183,8 @@ restrict_path_list=${restrict_path_list#\|} case "$SSH_ORIGINAL_COMMAND" in *\.\./*) reject_and_die 'directory traversal' ;; + *' +'*) reject_and_die 'unsafe character LF' ;; *\$*) reject_and_die 'unsafe character "$"' ;; *\&*) reject_and_die 'unsafe character "&"' ;; *\(*) reject_and_die 'unsafe character "("' ;;