[asterisk-dev] AEL security
sos at sokhapkin.dyndns.org
Mon Mar 19 04:12:16 MST 2007
AEL needs to use extensions when compiling "switch" statement, asterisk
extensions pattern match is being used for "default" case.
On Monday 19 March 2007 06:39, Philipp Kempgen wrote:
> Philipp Kempgen wrote:
> > It seems like AEL compiles labels into extensions.
> > So a users could directly dial to a label which seems
> > like a security risk to me. Am I missing something?
> Need to correct myself: AEL compiles the cases in a switch
> block into extensions. Labels remain untouched. But that
> doesn't make it any better.
More information about the asterisk-dev