OWASP / OWASP/Nest

Regex error message in validate_query doesn't include periods

Open
#3,630 6 comments 0 reactions 1 assignee Claimed by @theAnuragMishra View on GitHub
bug
Dominant language
Python
Stars
451
Forks
702
Avg merge
22h 59m
Merged PRs (30d)
91

Description

**Describe the bug**
The `validate_query` function in `backend/apps/core/validators.py` line uses the regex `r"^[\w .-]*$"` which allows periods ('.'). At first I thought this shouldn't even be allowed. But i realise it maybe the desired behavior. In that case, we should update the message to explicitly mention that periods are allowed.

**Are you going to work on fixing this?**

- [x] Yes
- [] No

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.