UNCLASSIFIED - NO CUI

Skip to content

Bull 2858

Jared Shue requested to merge BULL-2858 into BULL-2066

https://jira.il2.dso.mil/browse/BULL-2858

Description

See https://repo1.dso.mil/platform-one/party-bus/launchboard/launchboard-be/-/blob/master/src/api/status-api.js?ref_type=heads#L20

Validation should be created to only allow valid k8s namespace characters.

Acceptance Criteria

User is unable to do an injection attack or exploit the prometheus query by passing in an appName like ".*"

Helpful Stuff For Testing

const x = DsopApplication.new({
  id: 'something',
  name: 'something',
  url: 'https://dev.bigbang.mil',
  prometheusInstanceBaseUrl: 'https://dev.bigbang.mil',
  prometheusNamespace: 'i-am-NOT-compliant',
});

console.log(x);
Edited by Jared Shue

Merge request reports