awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: add limit to character length in api as well

Browse Source
This commit is contained in:
ShubhamPalriwala
2024-06-10 10:34:25 +05:30
parent 9e4b248794
commit abd4b411fa
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
backend/src/services/secret-sharing/secret-sharing-service.ts
View File

@@ -40,6 +40,20 @@ export const secretSharingServiceFactory = ({
if (new Date(expiresAt) < new Date()) {
throw new BadRequestError({ message: "Expiration date cannot be in the past" });
}
// Limit Expiry Time to 1 month
const expiryTime = new Date(expiresAt).getTime();
const currentTime = new Date().getTime();
const thirtyDays = 30 * 24 * 60 * 60 * 1000;
if (expiryTime - currentTime > thirtyDays) {
throw new BadRequestError({ message: "Expiration date cannot be more than 30 days currently." });
}
// Limit Input ciphertext length to 13000 (equivalent to 10,000 characters of Plaintext)
if (encryptedValue.length > 13000) {
throw new BadRequestError({ message: "Shared Secret Value too long" });
}
const newSharedSecret = await secretSharingDAL.create({
encryptedValue,
iv,
@@ -67,6 +81,11 @@ export const secretSharingServiceFactory = ({
throw new BadRequestError({ message: "Expiration date cannot be more than 30 days currently." });
}
// Limit Input ciphertext length to 13000 (equivalent to 10,000 characters of Plaintext)
if (encryptedValue.length > 13000) {
throw new BadRequestError({ message: "Shared Secret Value too long" });
}
const newSharedSecret = await secretSharingDAL.create({
encryptedValue,
iv,