search

HDFGroup / hsds

Cloud-native, service based access to HDF data
https://www.hdfgroup.org/solutions/hdf-kita/
Apache License 2.0
126 stars 52 forks source link

Restrict bucket names to alphanumeric characters and underscores #319

Closed mattjala closed 4 months ago

mattjala commented 4 months ago

This fixes a security issue where bucket strings could end up on the command line when using the Azure backend.

Not all of the AWS bucket naming rules are enforced - only the ones that are relevant to preventing security exploits, and can be checked directly by HSDS.

Also fixed PUT_Attributes and POST_Datatype in the DN not retrieving bucket from the body.