neil fbf3b41c54 dns_inwx: fix _get_root false zone match for single-letter subdomains ...

_get_root matched the candidate zone with _contains (grep), which treats
the domain as a regex. For "-d g.<zone>" the candidate "g.<zone>" matched
"<string>...<zone>" because '.' matches the '>' after "string" and the 'g'
comes from the "<string>" tag, so "g.<zone>" was wrongly taken as the root
zone (sub=_acme-challenge instead of _acme-challenge.g). Anchor the match
to <string>$h</string> and escape dots so the zone is compared literally.

Fixes #5129

2026-07-04 20:28:56 +08:00

11 KiB

Executable File

Raw Permalink Blame History

View Raw