apache / apache/airflow

Create a Middleware that prevent Regexp in the Requests

Open
#47,364 1 comment 0 reactions 1 assignee Claimed by @bugraoz93 View on GitHub
area:API kind:feature security
Dominant language
Python
Stars
46.9k
Forks
17.8k
Avg merge
2d 10h
Merged PRs (30d)
483

Description

### Description

Enhance security by eliminating regexp usage in any of the requests. Even if someone is trying to send regexp in str fields, we should return a proper error message that regexp isn't allowed.
https://fastapi.tiangolo.com/tutorial/middleware/#create-a-middleware

### Use case/motivation

https://lists.apache.org/thread/xtzdp4dx8s6dds4xdp9kdpohns9lvpst

### Related issues

Followup: #46971

### Are you willing to submit a PR?

- [x] Yes I am willing to submit a PR!

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.