std.crypto.Certificate: wildcard certs should only validate one level of sub-domain #14177
Labels
bug
Observed behavior contradicts documented or intended behavior
contributor friendly
This issue is limited in scope and/or knowledge of Zig internals.
enhancement
Solving this issue will likely involve adding new logic or components to the codebase.
standard library
This issue involves writing Zig code for the standard library.
Milestone
Extracted from #13980.
zig/lib/std/crypto/Certificate.zig
Lines 275 to 295 in c9ef277
This allows any prefix for wildcard hosts but it should only allow anything for one level of subdomain.
For example,
*.ziglang.org
should matchfoo.ziglang.org
but it should not matchbar.foo.ziglang.org
.The text was updated successfully, but these errors were encountered: