mirrors/mycorrhiza
1
0
Fork 0
mirror of https://github.com/osmarks/mycorrhiza.git synced 2025-07-05 11:02:49 +00:00
Code Issues Releases Wiki Activity

Fix hyphaNamePattern regexp

Browse Source 
There wasn't actually a vulnerability AFAIC because hypha names are
passed through CanonicalName which strips those characters, but fix it
anyway for the sake of correctness.
This commit is contained in:
Umar Getagazov 2022-08-21 16:18:28 +03:00
parent 55879806a3
commit 945cdc934c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hyphae/hypha.go
View File

@ -8,7 +8,7 @@ import (
) )
// hyphaNamePattern is a pattern which all hyphae names must match. // hyphaNamePattern is a pattern which all hyphae names must match.
var hyphaNamePattern = regexp.MustCompile(`[^?!:#@><*|"'&%{}]+`) var hyphaNamePattern = regexp.MustCompile(`^[^?!:#@><*|"'&%{}]+$`)
// IsValidName checks for invalid characters and path traversals. // IsValidName checks for invalid characters and path traversals.
func IsValidName(hyphaName string) bool { func IsValidName(hyphaName string) bool {