Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(fsxaremoteapi): uri encoding of user input #121

Merged
6 commits merged into from
Aug 8, 2022
Merged

Conversation

lksmsr
Copy link
Contributor

@lksmsr lksmsr commented Jul 28, 2022

No description provided.

@lksmsr lksmsr changed the title TNG-1179 URI Encoding fix(fsxaremoteapi): uri encoding of user input Jul 28, 2022
We need to ensure all user input that is used for constructing the backend request is sanitized to
prevent any exploiting of potential SSRF vulnerabilities.
@lksmsr lksmsr force-pushed the TNG-1179_URI_encoding branch 2 times, most recently from 9cec912 to 86af7a6 Compare July 28, 2022 12:27
@lksmsr
Copy link
Contributor Author

lksmsr commented Aug 2, 2022

We extended the scope of this ticket and added integration tests with it

@ghost ghost force-pushed the TNG-1179_URI_encoding branch 2 times, most recently from 06bcbf6 to 1f53b81 Compare August 4, 2022 10:59
@ghost ghost force-pushed the TNG-1179_URI_encoding branch from 1f53b81 to f3b9bf8 Compare August 4, 2022 11:03
@ghost ghost merged commit 6fc9ca8 into master Aug 8, 2022
@ghost ghost deleted the TNG-1179_URI_encoding branch August 8, 2022 15:48
github-actions bot pushed a commit that referenced this pull request Aug 8, 2022
## [10.3.2](v10.3.1...v10.3.2) (2022-08-08)

### Bug Fixes

* **fsxaremoteapi:** uri encoding of user input ([#121](#121)) ([6fc9ca8](6fc9ca8))
@github-actions
Copy link

github-actions bot commented Aug 8, 2022

🎉 This PR is included in version 10.3.2 🎉

The release is available on:

Your semantic-release bot 📦🚀

This pull request was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant