commit c6455baca3ad15813ffb4f2a78f56b897c9ee5b6
author Ray Milkey <ray@opennetworking.org> Wed Jan 02 15:07:33 2019 -0800
committer Thomas Vachuska <tom@opennetworking.org> Thu Jan 03 19:22:23 2019 +0000
tree 5ced32709c97ed2569d9d3c1e9c2b0eca9567c2a
parent 09ab5e2d7dd8b64e56e98dfd84987d8b030986d2

Filter backquote from strings possibly used in shell command

Change-Id: Ic4ccf17f5caed5538b4600f39110fcdec251a601

apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java

diff --git a/apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java b/apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java
index 907e017..26535d0 100644
--- a/apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java
+++ b/apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java
@@ -87,10 +87,10 @@
      */
     public static String getValidModelId(String id) throws
             IllegalArgumentException {
-        // checking weather modelId contains the alphanumeric character or not.
+        // checking whether modelId contains the alphanumeric character or not.
         if (id.matches(".*[A-Za-z0-9].*")) {
             // replacing special characters with '_'
-            id = id.replaceAll("[\\s\\/:*?\"\\[\\]<>|$@!#%&(){}';.,-]", "_");
+            id = id.replaceAll("[\\s\\/:*?\"\\[\\]<>|$@!#%&(){}'`;.,-]", "_");
             // remove leading and trailing underscore
             id = id.replaceAll("^_+|_+$", "");
             // replacing the consecutive underscores '_' to single _