Merge pull request #38 from bitleak/feature/add-namespace-validator

MOD: add namespace param validator in NewToken
bitleak · Jun 18, 2020 · 385f301 · 385f301
2 parents b89acc7 + 3eeefc0
commit 385f301
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/server/handlers/admin.go b/server/handlers/admin.go
@@ -68,6 +68,10 @@ func NewToken(c *gin.Context) {
 		c.JSON(http.StatusBadRequest, gin.H{"error": "the namespace name was too long"})
 		return
 	}
+	if !paramRegex.MatchString(namespace) {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "namespace name contains forbidden characters"})
+		return
+	}
 	pool := c.Query("pool")
 	var rawToken string
 	if userToken == "" {