Modified:
/web/www/boot/lml/index.pl
=======================================
--- /web/www/boot/lml/index.pl Wed May 4 06:36:09 2011
+++ /web/www/boot/lml/index.pl Tue Jan 24 09:28:32 2012
@@ -98,10 +98,12 @@
local $/=undef;
open FILE, "</etc/lml.conf";
binmode FILE;
- $confdata = escapeHTML(<FILE>);
+ $confdata = <FILE>;
close FILE;
}
-$confdata =~ s/$CONFIG{vsphere}{password}/*******************/g;
+my $quoted_password = quotemeta($CONFIG{vsphere}{password});
+$confdata =~ s/$quoted_password/*******************/g;
+$confdata = escapeHTML($confdata);
print <<EOF;
$confdata
</pre>