]> git.ipfire.org Git - thirdparty/bacula.git/commitdiff
baculum: Extend object name validation pattern
authorMarcin Haba <marcin.haba@bacula.pl>
Tue, 28 Mar 2023 08:37:11 +0000 (10:37 +0200)
committerMarcin Haba <marcin.haba@bacula.pl>
Thu, 20 Apr 2023 10:00:26 +0000 (12:00 +0200)
gui/baculum/protected/API/Pages/API/Objects.php
gui/baculum/protected/Common/Modules/Miscellaneous.php

index 264933f70c3cbef7fc40f82f82dd041379b2cb08..c893d078d02ad6fb034088b32878449b4d70228f 100644 (file)
@@ -37,7 +37,7 @@ class Objects extends BaculumAPIServer {
                $limit = $this->Request->contains('limit') && $misc->isValidInteger($this->Request['limit']) ? (int)$this->Request['limit'] : 0;
                $offset = $this->Request->contains('offset') && $misc->isValidInteger($this->Request['offset']) ? (int)$this->Request['offset'] : 0;
                $objecttype = $this->Request->contains('objecttype') && $misc->isValidName($this->Request['objecttype']) ? $this->Request['objecttype'] : null;
-               $objectname = $this->Request->contains('objectname') && $misc->isValidName($this->Request['objectname']) ? $this->Request['objectname'] : null;
+               $objectname = $this->Request->contains('objectname') && $misc->isValidNameExt($this->Request['objectname']) ? $this->Request['objectname'] : null;
                $objectcategory = $this->Request->contains('objectcategory') && $misc->isValidName($this->Request['objectcategory']) ? $this->Request['objectcategory'] : null;
                $objectsource = $this->Request->contains('objectsource') && $misc->isValidName($this->Request['objectsource']) ? $this->Request['objectsource'] : null;
                $objectuuid = $this->Request->contains('objectuuid') && $misc->isValidName($this->Request['objectuuid']) ? $this->Request['objectuuid'] : null;
index a2698e6a86f3429fd2d90d9997b0d2128096af67..45b57718bfe00367473a12fc861ae687085009bd 100644 (file)
@@ -225,7 +225,7 @@ class Miscellaneous extends TModule {
        }
 
        public function isValidNameExt($name_ext) {
-               return (preg_match('/^[\w:\.\-\s\*=]{1,127}$/', $name_ext) === 1);
+               return (preg_match('/^[\w:\.\-\s\*=@]{1,127}$/', $name_ext) === 1);
        }
 
        public function isValidState($state) {