[asterisk-dev] Dialstring injection - security advisory release?

[Benny Amorsen]

Atis Lezdins <atis at iq-labs.net> writes:

> Isn't the problem solved by using exact dialplan patterns only
> allowing numbers or alpha-numeric characters? I have all calls going
> through strict mask pattern, for example:
>
> _XXXXX => internal calls
> _18XXXXXXXXX => toll free calls

Many countries have variable-length numbers.


/Benny