vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Make sure repository names in APPR match regex

Browse source
This commit is contained in:
Joseph Schorr 2017-03-23 00:51:54 -04:00
parent 1145651b7a
commit 3277fe9b4e
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
endpoints/appr/registry.py
View file

@ -18,6 +18,7 @@ from endpoints.appr import appr_bp, require_app_repo_read, require_app_repo_writ
from endpoints.appr.decorators import disallow_for_image_repository from endpoints.appr.decorators import disallow_for_image_repository
from endpoints.appr.cnr_backend import Package, Channel, Blob from endpoints.appr.cnr_backend import Package, Channel, Blob
from endpoints.decorators import anon_allowed, anon_protect from endpoints.decorators import anon_allowed, anon_protect
from util.names import REPOSITORY_NAME_REGEX
logger = logging.getLogger(__name__) logger = logging.getLogger(__name__)
@ -171,6 +172,11 @@ def pull(namespace, package_name, release, media_type):
@anon_protect @anon_protect
def push(namespace, package_name): def push(namespace, package_name):
reponame = repo_name(namespace, package_name) reponame = repo_name(namespace, package_name)
if not REPOSITORY_NAME_REGEX.match(package_name):
logger.debug('Found invalid repository name CNR push: %s', reponame)
raise InvalidUsage()
values = request.get_json(force=True, silent=True) values = request.get_json(force=True, silent=True)
release_version = values['release'] release_version = values['release']
media_type = values['media_type'] media_type = values['media_type']