awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-06 21:27:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(secret-sync): validate secret names using SecretNameSchema before processing

Browse Source
This commit is contained in:
Victor Santos
2025-10-23 16:40:54 -03:00
parent d2cd5544b9
commit 761a898484
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/secret-sync/secret-sync-queue.ts
+9
View File
@@ -63,6 +63,7 @@ import { TAppConnectionDALFactory } from "../app-connection/app-connection-dal";
import { TFolderCommitServiceFactory } from "../folder-commit/folder-commit-service"; import { TFolderCommitServiceFactory } from "../folder-commit/folder-commit-service";
import { TNotificationServiceFactory } from "../notification/notification-service"; import { TNotificationServiceFactory } from "../notification/notification-service";
import { NotificationType } from "../notification/notification-types"; import { NotificationType } from "../notification/notification-types";
import { SecretNameSchema } from "@app/server/lib/schemas";
export type TSecretSyncQueueFactory = ReturnType<typeof secretSyncQueueFactory>; export type TSecretSyncQueueFactory = ReturnType<typeof secretSyncQueueFactory>;
@@ -408,6 +409,14 @@ export const secretSyncQueueFactory = ({
if (!Object.keys(importedSecrets).length) return {}; if (!Object.keys(importedSecrets).length) return {};
for (const [key] of Object.entries(importedSecrets)) {
const result = SecretNameSchema.safeParse(key);
if (!result.success) {
const errorMessage = result.error.issues[0]?.message || "Invalid secret name";
throw new Error(`Invalid secret name "${key}": ${errorMessage}`);
}
}
const importedSecretMap: TSecretMap = {}; const importedSecretMap: TSecretMap = {};
const secretMap = await $getInfisicalSecrets(secretSync, false); const secretMap = await $getInfisicalSecrets(secretSync, false);