Merge pull request #2742 from RedisInsight/fe/bugfix/RI-5046-fix-regex-vulnarability

Artem · web-flow · commit da00ce1d8572 · 2023-11-01T09:27:26.000+03:00
escape "-" symbol to avoid regex range
diff --git a/redisinsight/ui/src/utils/validations.ts b/redisinsight/ui/src/utils/validations.ts
@@ -111,7 +111,7 @@ export const errorValidateNegativeInteger = (value: string) => {
 }
 
 export const validateCertName = (initValue: string) =>
-  initValue.replace(/[^ a-zA-Z0-9!@#$%^&*-_()[\]]+/gi, '').toString()
+  initValue.replace(/[^ a-zA-Z0-9!@#$%^&*\-_()[\]]+/gi, '').toString()
 
 export const isRequiredStringsValid = (...params: string[]) => params.every((p = '') => p.length > 0)
 

Original file line number	Diff line number	Diff line change
`@@ -111,7 +111,7 @@ export const errorValidateNegativeInteger = (value: string) => {`
`111`	`111`	`}`
`112`	`112`
`113`	`113`	`export const validateCertName = (initValue: string) =>`
`114`		`- initValue.replace(/[^ a-zA-Z0-9!@#$%^&*-_()[\]]+/gi, '').toString()`
	`114`	`+ initValue.replace(/[^ a-zA-Z0-9!@#$%^&*\-_()[\]]+/gi, '').toString()`
`115`	`115`
`116`	`116`	`export const isRequiredStringsValid = (...params: string[]) => params.every((p = '') => p.length > 0)`
`117`	`117`