Forum Discussion
The EVAL command
Hi all,
I am testing the eval command and want to generate an error if my input script contains an error. My test code is as follows:
set cmd "if { \[HTTP::uri\] starts_with \"/h...
Simon_Mittelber
Nimbostratus
Nimbostratusis there any news on this one?
using eval for this, as spark suggests, is dangerous in my eyes:
eval "HTTP::respond 302 Location http://new.example.com $headers"
what if headers contain user input? someone could inject commands...
or what if anyone would use it for a response including content:
eval "HTTP::respond 200 content $content"
what if the content contains user input?
i think introducing the {*}-command is the only way to enable safe argument expansion.
i did a
[info patchlevel]is big ip expected to move to 8.5 in the near future?
