Prevent query injection through origin token during authentication.

R2Northstar / NorthstarMasterServer

Master server for Northstar

MIT License

92 stars 33 forks source link

Prevent query injection through origin token during authentication. #91

Closed Erlite closed 2 years ago

Erlite commented 2 years ago

This PR aims to prevent a potential query parameter injection while authenticating using an Origin token. The token parameter was not sanitized correctly, potentially allowing a malicious user to trick Stryder into accepting their token and UID while giving the master server someone else's UID.

Erlite commented 2 years ago

Ignore the weird review, was using the browser IDE and it did that for some reason.

pg9182 commented 2 years ago

Superseded by R2Northstar/Atlas.