[asterisk-users] Important security alert: update your dialplans now!

[Lenz Emilitri]

Or one could simply rewrite to:

[incoming-from-voip]
exten => XXXXXXX,1,Dial(${EXTEN}@incoming-from-voip-old)
exten => XXXXXXXX,1,Dial(${EXTEN}@incoming-from-voip-old)
exten => XXXXXXXXX,1,Dial(${EXTEN}@incoming-from-voip-old)
exten => XXXXXXXXXX,1,Dial(${EXTEN}@incoming-from-voip-old)

[incoming-from-voip-old]
exten => _X., 1, dial(SIP/${EXTEN})

To avoid extensive rewriting and fix the current issue.
l.


2010/2/14 Steve Edwards <asterisk.org at sedwards.com>

> On Sun, 14 Feb 2010, Kyle Kienapfel wrote:
>
> > strip_ampersands(${EXTEN})?
>
> (sip.conf)
>
> [general]
>        allow-characters                = all
>        disallow-characters             = "&"
>
> [example-did-provider]
>        allow-characters                = "[:numeric:]"
>
>  -



-- 
Loway - home of QueueMetrics - http://queuemetrics.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100215/4c5de0cf/attachment.htm