Bug #4026
Updated by Dominic Cleal almost 11 years ago
The two Windows providers (native_ms/dnscmd) should escape incoming data which is currently passed straight to the cmd.exe shell.
Assigning Sam as he's already looked a bit at this.
More discussion: https://github.com/theforeman/smart-proxy/pull/127/files#r8814677