chef-server icon indicating copy to clipboard operation
chef-server copied to clipboard

Relax name validation in chef-server

Open stevendanna opened this issue 10 years ago • 3 comments

Many objects in chef-server have stricter naming validation than our users may like. In many cases this doesn't feel strictly necessary. While we do need many names to be rendered into URIs, we could use percent escaping to make more complex names URI-safe.

stevendanna avatar Dec 17 '15 19:12 stevendanna

Naming regexes in Reporting and Analytics should be verified/tested with whatever changes are made.

bookshelfdave avatar Dec 17 '15 19:12 bookshelfdave

This would include making changes to opscode-erchef and nginx for the lua rules.

PrajaktaPurohit avatar Jan 31 '20 20:01 PrajaktaPurohit

Looking at the peg grammar in https://github.com/chef/chef-server/blob/master/omnibus/files/private-chef-cookbooks/private-chef/templates/default/nginx/scripts/routes.lua.erb#L87. It appears that the peg grammar does not have strict validation for usernames.

PrajaktaPurohit avatar Dec 22 '20 00:12 PrajaktaPurohit