Did Monit Settings Change?

[mlenje]

It was working perfectly, but now I am getting an error in the Alert Setting for the Mail Format free text field that says "Text may not contain spaces or tabs."

Monit 5.35.2 on OPNsense v26.1.11

[lmoore]

Are you on 26.1.11_3 or later?

https://forum.opnsense.org/index.php?msg=269519

[mlenje]

I am on 26.1.11_5... will update to 26.1.11_6 and see if that helps.

[mlenje]

Still persists with v26.1.11_6

[franco]

Can you open a ticket on GitHub? A security issue was raised over concerns of arbitrary config file injection due to settings made by Monit amongst other which prompted us to make the validation of some fields more restrictive. Mail format should have been flagged as one of those that apparently allow newlines and thus need other safeguards if any, but I also have no idea how mail format is escaped underneath so a ticket would be better.


Thanks,
Franco

[mlenje]

Ticket created.

[franco]

Thanks, moved to core: https://github.com/opnsense/core/issues/10498

[franco]

# opnsense-patch https://github.com/opnsense/core/commit/d930c04