api: Don't perform search if the query is not a valid hostname

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/dbl/api/__init__.py b/src/dbl/api/__init__.py
index c9daa7d3b7e8f9ccabec03a4fe15d89b07c61f50..d2795ea424ac593127973f7e0638913305a62362 100644 (file)
--- a/src/dbl/api/__init__.py
+++ b/src/dbl/api/__init__.py
@@ -23,6 +23,7 @@ import fastapi.security
 
 # Import the backend
 from .. import Backend
+from .. import util
 
 # Import middlewares
 from . import middlewares
@@ -65,6 +66,10 @@ def search(q: str):
        """
        res = {}
 
+       # Check if the query is a valid FQDN
+       if not util.is_fqdn(q):
+               raise fastapi.HTTPException(400, "Not a valid FQDN: %s" % q)
+
        # Perform the search
        results = backend.search(q)