awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Vulnerable regex test

Browse Source
This commit is contained in:
x032205
2025-05-31 00:50:51 -04:00
parent a0aafcc1bf
commit 082d6c44c4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
backend/src/services/secret-sync/hc-vault/hc-vault-sync-schemas.ts
View File

@@ -23,7 +23,7 @@ const HCVaultSyncDestinationConfigSchema = z.object({
.trim()
.min(1, "Path required")
.max(128)
.transform((val) => new RE2("^/+|/+$", "g").replace(val, "")) // removes leading/trailing slashes
.transform((val) => val.replace(/^\/+|\/+$/g, "")) // removes leading/trailing slashes
.refine((val) => new RE2("^([a-zA-Z0-9._-]+/)*[a-zA-Z0-9._-]+$").test(val), {
message:
"Invalid Vault path format. Use alphanumerics, dots, dashes, underscores, and single slashes between segments."