search

elixir-cloud-aai / foca

Opinionated Flask microservice archetype for quick OpenAPI-based microservice development
Apache License 2.0
16 stars 12 forks source link

feat(utils): secure "generate_id" function #242

Open uniqueg opened 5 months ago

uniqueg commented 5 months ago

Guard function against code injection, see https://github.com/elixir-cloud-aai/drs-filer/issues/54

Remove eval and instead require callers to provide a literal string of allowed chars to charset, e.g., 0123456789ABCDEF.