vbatts/registry
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #1828 from nwt/foreign-layer-url-validation

Browse source 
Properly validate multi-URL foreign layers
This commit is contained in:
Derek McGowan 2016-07-11 13:01:04 -07:00 committed by GitHub
commit 9d84a6a18e
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
registry/storage/schema2manifesthandler.go
View file

@ -107,6 +107,7 @@ func (ms *schema2ManifestHandler) verifyManifest(ctx context.Context, mnfst sche
pu, err = url.Parse(u) pu, err = url.Parse(u)
if err != nil || (pu.Scheme != "http" && pu.Scheme != "https") || pu.Fragment != "" { if err != nil || (pu.Scheme != "http" && pu.Scheme != "https") || pu.Fragment != "" {
err = errInvalidURL err = errInvalidURL
break
} }
} }
} }

5
registry/storage/schema2manifesthandler_test.go
View file

@ -78,6 +78,11 @@ func TestVerifyManifestForeignLayer(t *testing.T) {
[]string{"https://foo/bar", ""}, []string{"https://foo/bar", ""},
errInvalidURL, errInvalidURL,
}, },
{
foreignLayer,
[]string{"", "https://foo/bar"},
errInvalidURL,
},
{ {
foreignLayer, foreignLayer,
[]string{"http://foo/bar"}, []string{"http://foo/bar"},