HangfireIO / HangfireIO/Hangfire

There is no validation for configuring queue names in HangfireServer option

Open
#2,091 2 comments 0 reactions 0 assignees View on GitHub
a: dotnetcore t: bug
Dominant language
C#
Stars
10.1k
Forks
1.8k
Avg merge
1h 19m
Merged PRs (30d)
1

Description

Because the queue name has validation : 'A queue name that consists only of lowercase, letters, digits and underscores.'

However, when setup HangfireServer option, we can configure the invalid queue names.

``` C#
builder.Services.AddHangfireServer(option =>
{
option.Queues = new string[]
{
"DEFAULT",
"&*asd!#",
"QUEUEU!"
};
});
```
The dashboard still can see these queue names and can browse anyone.

![image](https://user-images.githubusercontent.com/42088918/190119355-6f16c73b-591b-4753-b3ce-7d2445d8b28e.png)
![image](https://user-images.githubusercontent.com/42088918/190119465-f6504e9e-87c7-4c92-b618-0e0c4a34a1a5.png)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.