Open stevendanna opened 8 years ago
Naming regexes in Reporting and Analytics should be verified/tested with whatever changes are made.
This would include making changes to opscode-erchef and nginx for the lua rules.
Looking at the peg grammar in https://github.com/chef/chef-server/blob/master/omnibus/files/private-chef-cookbooks/private-chef/templates/default/nginx/scripts/routes.lua.erb#L87. It appears that the peg grammar does not have strict validation for usernames.
Many objects in chef-server have stricter naming validation than our users may like. In many cases this doesn't feel strictly necessary. While we do need many names to be rendered into URIs, we could use percent escaping to make more complex names URI-safe.