hostsharing/hs.hsadmin.ng
6
0
Fork 0
Code Pull Requests 2 Activity

add " to "emailAddressRegEx validation

Browse Source
This commit is contained in:
Michael Hoennig 2024-12-13 10:11:00 +01:00
parent 0ebaec6908
commit 26c9780417
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/main/java/net/hostsharing/hsadminng/hs/office/contact/HsOfficeContactRbacRepository.java
View File

@ -36,9 +36,9 @@ public interface HsOfficeContactRbacRepository extends Repository<HsOfficeContac
static String emailRegEx(@NotNull String emailAddress) { static String emailRegEx(@NotNull String emailAddress) {
// TODO.impl: find more secure solution, maybe we substitute a placeholder with the whole expression? // TODO.impl: find more secure solution, maybe we substitute a placeholder with the whole expression?
if (emailAddress.contains("'") || emailAddress.endsWith("\\") ) { if (emailAddress.contains("'") || emailAddress.contains("\"") || emailAddress.endsWith("\\") ) {
throw new ValidationException( throw new ValidationException(
"emailAddress contains invalid characters: " + emailAddress); "emailAddressRegEx contains invalid characters: " + emailAddress);
} }
return emailAddress.replace("%", ".*"); // the JSON-matcher in PostgreSQL needs a wildcard return emailAddress.replace("%", ".*"); // the JSON-matcher in PostgreSQL needs a wildcard
} }