Update regex to resolve security alert (#114)

* Update Const.java * Update Const.java * Update Const.java * Update Const.java
microsoft · Nov 3, 2022 · 335b03b · 335b03b
1 parent 3bfe51a
commit 335b03b
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/common/src/main/java/com/microsoft/hydralab/common/util/Const.java b/common/src/main/java/com/microsoft/hydralab/common/util/Const.java
@@ -99,14 +99,14 @@ interface RegexString {
         String COMMON_STR = "\\w*";
         // HTTP url  e.g. /api/auth
         String URL = "(/[A-Za-z0-9_.-]*)*";
-        String MAIL_ADDRESS = "[a-zA-Z0-9_-]+@[a-zA-Z0-9_-]+(.[a-zA-Z0-9_-]+)+$";
+        String MAIL_ADDRESS = "\\w+([-+.]\\w+)*@\\w+([-.]\\w+)*\\.\\w+([-.]\\w+)*";
 
         //File path
-        String LINUX_PATH = "^\\/([^\\/]+\\/?)*$";
+        String LINUX_PATH = "^\\/([\\w]\\/?)+$";
         String WINDOWS_PATH = "^([a-zA-Z]:)(\\\\[^/\\\\:*?\"<>|]+\\\\?)*$";
 
         //Package name
-        String PACKAGE_NAME = "[a-zA-Z]+[0-9a-zA-Z_]*(\\.[a-zA-Z]+[0-9a-zA-Z_]*)*";
+        String PACKAGE_NAME = "\\w+([-.]\\w+)*\\.\\w+([-.]\\w+)*";
     }
 
     interface PermissionType {