Pārlūkot izejas kodu

HPCC-8797 Configmgr - Guard against special characters in Comp Names

- Allow only Alpha numerics and underscores in component name

Signed-off-by: Gleb Aronsky <gleb.aronsky@lexisnexis.com>
Gleb Aronsky 12 gadi atpakaļ
vecāks
revīzija
5e6f582459
1 mainītis faili ar 3 papildinājumiem un 3 dzēšanām
  1. 3 3
      esp/files/scripts/configmgr/configmgr.js

+ 3 - 3
esp/files/scripts/configmgr/configmgr.js

@@ -942,11 +942,11 @@ function handleConfigCellClickEvent(oArgs, caller, isComplex) {
         refreshConfirm = false;
     }
 
-    var regEx = new RegExp('/\""<>[]', 'g');
+    var regEx = new RegExp("^[a-zA-Z0-9_]+$");
 
-    if (attrName == 'name' && newValue.search(regEx) == -1)
+    if (attrName == 'name' && regEx.test(newValue) == false)
     {
-      alert("Invalid character in Component Name.");
+      alert("Invalid character in component name. Only alpha-numerics and underscores '_' are allowed.");
       return false;
     }
     var xmlArgs = argsToXml(category, params, attrName, oldValue, newValue, recordIndex + 1, record.getData(column.key + '_onChange'));