kup-server: protect against downright idiotic user/group names

If someone has really bizarre user or group names in the system,
make sure we encode them just like we do with everything else.

Signed-off-by: H. Peter Anvin <hpa@zytor.com>

1 files changed, 2 insertions, 0 deletions

diff --git a/kup-server b/kup-server
index c42984b..34bdf33 100755
--- a/kup-server
+++ b/kup-server
@@ -1015,6 +1015,7 @@ sub get_usr($)
     }
 
     my $usr = getpwuid($uid) || sprintf("%u", $uid);
+    $usr = url_encode($usr);	# If we have really strange names...
 
     $uid_hash{$uid} = $usr;
     return $usr;
@@ -1030,6 +1031,7 @@ sub get_grp($)
     }
 
     my $grp = getgrgid($gid) || sprintf("%u", $gid);
+    $grp = url_encode($grp);	# If we have really strange names...
 
     $gid_hash{$gid} = $grp;
     return $grp;