synced/infisical
1
0
Fork 0
mirror of https://github.com/Infisical/infisical.git synced 2025-04-17 19:37:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

update verifyHostInputValidity

Browse Source
This commit is contained in:
Maidul Islam
2025-02-27 02:56:28 +09:00
parent 41a3ca149d
commit de420fd02c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts
View File

@ -24,7 +24,7 @@ export const verifyHostInputValidity = (host: string, isGateway = false) => {
if (
host === "localhost" ||
host === "127.0.0.1" ||
crypto.timingSafeEqual(Buffer.from(dbHost || ""), Buffer.from(host))
(dbHost?.length === host.length && crypto.timingSafeEqual(Buffer.from(dbHost || ""), Buffer.from(host)))
) {
throw new BadRequestError({ message: "Invalid db host" });
}