google / timesketch

Collaborative forensic timeline analysis
Apache License 2.0
2.52k stars 577 forks source link

Timesketch form validation bug #3025

Closed jkppr closed 5 months ago

jkppr commented 5 months ago

Timesketch does not validate input fields for Sketch-, Timeline- or View-names. But the database only allows for max. 255 characters for a name. Currently a name > 255 characters will be accepted by front- & backend and result in a crash on the webserver as soon as it attempts to insert the name into the database.

Solution: Introduce form validation in the front- and backend.