Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix - Incomplete regular expression for hostnames #1993

Commits on Mar 15, 2022

  1. Fix - Incomplete regular expression for hostnames

    Fixed the codeql issue
    ```
    Sanitizing untrusted URLs is an important technique for preventing attacks such as request forgeries and malicious redirections. Often, this is done by checking that the host of a URL is in a set of allowed hosts.
    
    If a regular expression implements such a check, it is easy to accidentally make the check too permissive by not escaping regular-expression meta-characters such as ..
    
    Even if the check is not used in a security-critical context, the incomplete check may still cause undesirable behavior when it accidentally succeeds.
    
    ```
    naveensrinivasan committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    de854ab View commit details
    Browse the repository at this point in the history