sneak/upaas
1
0
Fork 0
Code Issues 21 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Add server-side app name validation (closes #37) #49

Merged
sneak merged 2 commits from :fix/server-side-app-name-validation into main 2026-02-16 07:07:48 +01:00
Conversation 1 Commits 2 Files Changed 3 +116 -3

2 Commits

Author SHA1 Message Date
Jeffrey Paul
4f1f3e2494 Merge branch 'main' into fix/server-side-app-name-validation 2026-02-16 07:07:28 +01:00
user
d27adc040d Add server-side app name validation (closes #37) 
Validate app names in both HandleAppCreate and HandleAppUpdate using
a regex pattern matching the client-side HTML pattern: lowercase
alphanumeric and hyphens, 2-63 chars, must start and end with
alphanumeric character.

This prevents Docker API errors, path traversal, and log injection
from crafted POST requests bypassing browser validation.
 2026-02-15 22:06:08 -08:00