Opened 17 years ago

Last modified 17 years ago

#2286 closed defect

Requiring validation patterns for runtime subs and cgi-based attribute queries. — at Version 2

Reported by: sdlime Owned by: sdlime
Priority: normal Milestone: 5.0 release
Component: MapServer C Library Version: 5.0
Severity: normal Keywords:
Cc: dmorissette

Description (last modified by sdlime)

Version 4.10+ of MapServer allows users to define validation patterns to ensure the data to be substituted at runtime is of a valid type. This is an optional check. I'm proposing that it be mandatory. That is, no runtime substitutions can be done without passing a validation regex.

Note this should also apply to validation on qstring values for cgi-based attribute queries. This was just added (r6766) but is also optional.

Steve

Change History (2)

comment:1 by sdlime, 17 years ago

Owner: changed from morissette to sdlime
Status: new → assigned

Note, the change is simple. I just have to move a brace closing an if-then check...

Steve

comment:2 by sdlime, 17 years ago

Description: modified (diff)
Summary: Runtime substitutions should require validation patterns → Requiring validation patterns for runtime subs and cgi-based attribute queries.
Note: See TracTickets for help on using tickets.