From de420fd02cf8b4f33018fb2b0a28d27f6fffdbce Mon Sep 17 00:00:00 2001 From: Maidul Islam Date: Thu, 27 Feb 2025 02:56:28 +0900 Subject: [PATCH] update verifyHostInputValidity --- backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts b/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts index ac6a66d3b..3bd409faf 100644 --- a/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts +++ b/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts @@ -24,7 +24,7 @@ export const verifyHostInputValidity = (host: string, isGateway = false) => { if ( host === "localhost" || host === "127.0.0.1" || - crypto.timingSafeEqual(Buffer.from(dbHost || ""), Buffer.from(host)) + (dbHost?.length === host.length && crypto.timingSafeEqual(Buffer.from(dbHost || ""), Buffer.from(host))) ) { throw new BadRequestError({ message: "Invalid db host" }); }