guardicore / guardicore/monkey
Custom config types not validated on the back end
Open
Bug
Impact: Low
- Dominant language
- Python
- Stars
- 7.1k
- Forks
- 830
- PR merge metrics
- No merged PRs in 30d
Description
## Describe the bug
Custom types that are defined in `monkey/monkey_island/cc/ui/src/components/configuration-components/ValidationFormats.js` are not validated on the back end
The custom types are:
- Hostname
- IP ranges (cidr notation, IP-IP, etc.)
- Ransomware file extension
- Linux/windows absolute path for directory to encrypt
## To Reproduce
Steps to reproduce the behavior:
1. Send a config request with invalid custom type
2. Back end accepts the invalid configuration
Contributor guide
Assessment
This issue has not been assessed yet.