Fix bug 1595 - Can not create Openstack vim due to special characters in username 62/11062/2
authorsousaedu <eduardo.sousa@canonical.com>
Mon, 12 Jul 2021 08:21:06 +0000 (10:21 +0200)
committersousaedu <eduardo.sousa@canonical.com>
Fri, 16 Jul 2021 11:50:07 +0000 (13:50 +0200)
I've checked the code in common and in NBI to see if there was a
possible vector for NoSQL Injection and there wasn't.

Change-Id: I9f1626f8d943999d94d82444aec12efa0f66ddc7
Signed-off-by: sousaedu <eduardo.sousa@canonical.com>
osm_nbi/validation.py

index 2fc399f..c5f3ef2 100644 (file)
@@ -497,7 +497,7 @@ vim_account_edit_schema = {
         # "vim_url_admin": description_schema,
         # "vim_tenant": name_schema,
         "vim_tenant_name": name_schema,
-        "vim_user": shortname_schema,
+        "vim_user": string_schema,
         "vim_password": passwd_schema,
         "vca": id_schema,
         "config": {"type": "object"},
@@ -521,7 +521,7 @@ vim_account_new_schema = {
         # "vim_url_admin": description_schema,
         # "vim_tenant": name_schema,
         "vim_tenant_name": name_schema,
-        "vim_user": shortname_schema,
+        "vim_user": string_schema,
         "vim_password": passwd_schema,
         "vca": id_schema,
         "config": {"type": "object"},