Create a Middleware that prevent Regexp in the Requests
Open
area:API
kind:feature
security
- Dominant language
- Python
- Stars
- 46.9k
- Forks
- 17.8k
- Avg merge
- 2d 10h
- Merged PRs (30d)
- 483
Description
### Description
Enhance security by eliminating regexp usage in any of the requests. Even if someone is trying to send regexp in str fields, we should return a proper error message that regexp isn't allowed.
https://fastapi.tiangolo.com/tutorial/middleware/#create-a-middleware
### Use case/motivation
https://lists.apache.org/thread/xtzdp4dx8s6dds4xdp9kdpohns9lvpst
### Related issues
Followup: #46971
### Are you willing to submit a PR?
- [x] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
Contributor guide
Assessment
This issue has not been assessed yet.