From aecc706aea5ff003112e41f7871d5c33c7013693 Mon Sep 17 00:00:00 2001 From: Laurens Nienhaus <94158+laurens@users.noreply.github.com> Date: Wed, 10 Jan 2024 23:08:05 +0100 Subject: [PATCH] Fix link to `addFormat` docs --- docs/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/security.md b/docs/security.md index 7ecf8b031..da851ce5e 100644 --- a/docs/security.md +++ b/docs/security.md @@ -93,7 +93,7 @@ If you use Ajv to validate data from untrusted sources **it is strongly recommen - making assessment of "format" implementations in [ajv-formats](https://github.com/ajv-validator/ajv-formats). - passing `"fast"` option to ajv-formats plugin (see its docs) that simplifies some of the regular expressions (although it does not guarantee that they are safe). -- replacing format implementations provided by ajv-formats with your own implementations of "format" keyword that either use different regular expressions or another approach to format validation. Please see [addFormat](#api-addformat) method. +- replacing format implementations provided by ajv-formats with your own implementations of "format" keyword that either use different regular expressions or another approach to format validation. Please see [addFormat](https://github.com/ajv-validator/ajv/blob/master/docs/api.md#api-addformat) method. - disabling format validation by ignoring "format" keyword with option `format: false` Whatever mitigation you choose, please assume all formats provided by ajv-formats as potentially unsafe and make your own assessment of their suitability for your validation scenarios.