awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 02:27:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Vulnerable regex test

Browse Source
This commit is contained in:
x032205
2025-05-31 00:50:51 -04:00
parent a0aafcc1bf
commit 082d6c44c4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/secret-sync/hc-vault/hc-vault-sync-schemas.ts
+1 -1
View File
@@ -23,7 +23,7 @@ const HCVaultSyncDestinationConfigSchema = z.object({
.trim() .trim()
.min(1, "Path required") .min(1, "Path required")
.max(128) .max(128)
.transform((val) => new RE2("^/+|/+$", "g").replace(val, "")) // removes leading/trailing slashes .transform((val) => val.replace(/^\/+|\/+$/g, "")) // removes leading/trailing slashes
.refine((val) => new RE2("^([a-zA-Z0-9._-]+/)*[a-zA-Z0-9._-]+$").test(val), { .refine((val) => new RE2("^([a-zA-Z0-9._-]+/)*[a-zA-Z0-9._-]+$").test(val), {
message: message:
"Invalid Vault path format. Use alphanumerics, dots, dashes, underscores, and single slashes between segments." "Invalid Vault path format. Use alphanumerics, dots, dashes, underscores, and single slashes between segments."