awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-08 16:28:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

improvements: prevent comma separated value usage with eq and neq checks

Browse Source
This commit is contained in:
Scott Wilson
2025-06-04 14:21:36 -07:00
parent caeda09b21
commit 54435d0ad9
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/pages/project/RoleDetailsBySlugPage/components/ProjectRoleModifySection.utils.tsx
+17
View File
@@ -226,6 +226,23 @@ const ConditionSchema = z
: el.rhs.trim().startsWith("/") : el.rhs.trim().startsWith("/")
), ),
{ message: "Invalid Secret Path. Must start with '/'" } { message: "Invalid Secret Path. Must start with '/'" }
)
.refine(
(val) =>
val
.filter((el) => el.operator === PermissionConditionOperators.$EQ)
.every((el) => !el.rhs.includes(",")),
{ message: '"Equal" checks cannot contain comma separated values. Use "IN" operator instead.' }
)
.refine(
(val) =>
val
.filter((el) => el.operator === PermissionConditionOperators.$NEQ)
.every((el) => !el.rhs.includes(",")),
{
message:
'"Not Equal" checks cannot contain comma separated values. Use "IN" operator with "Forbid" instead.'
}
); );
export const projectRoleFormSchema = z.object({ export const projectRoleFormSchema = z.object({