nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-05 19:23:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add some string escaping to handle transcription providers

Browse Source
This commit is contained in:
Dan
2018-10-26 23:15:06 -07:00
parent 098fcf5f34
commit 5bbd0e6d66
1 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
resources/install/scripts/app/voicemail/resources/functions/record_message.lua
View File

@@ -38,6 +38,22 @@
end)
end
--define escape function (prevents lua injection attacks)
local function esc(x)
return (x:gsub('%%', '%%%%')
:gsub('^%^', '%%^')
:gsub('%$$', '%%$')
:gsub('%(', '%%(')
:gsub('%)', '%%)')
:gsub('%.', '%%.')
:gsub('%[', '%%[')
:gsub('%]', '%%]')
:gsub('%*', '%%*')
:gsub('%+', '%%+')
:gsub('%-', '%%-')
:gsub('%?', '%%?'))
end
local function transcribe(file_path,settings,start_epoch)
--transcription variables
if (os.time() - start_epoch > 2) then
@@ -106,7 +122,7 @@
if (transcription_server ~= '') then
transcribe_cmd = "curl -L " .. transcription_server .. " -F file=@"..file_path
local handle = io.popen(transcribe_cmd);
local transcribe_result = handle:read("*a");
local transcribe_result = esc(handle:read("*a"));
handle:close();
if (debug["info"]) then
freeswitch.consoleLog("notice", "[voicemail] CMD: " .. transcribe_cmd .. "\n");