search

meraki / dashboard-api-python

Official Dashboard API library (SDK) for Python
MIT License
289 stars 151 forks source link

Added path parameter escaping #192

Closed KennethWilke closed 2 years ago

KennethWilke commented 2 years ago

This change filters URL path parameters through urllib.parse.quote to sanitize inputs that are formatted into the url paths. This mitigates the risk of path traversal attacks.

This also adds administered to the supported scopes for the newly added /administered/identities/me (getAdministeredIdentitiesMe) operation.

This change also fixes a mix of tabs and spaces in the async_function_template template.

TKIPisalegacycipher commented 2 years ago

Thank you for this! I also updated the init files on a few classes, as is required when adding new scopes like 'administered'.

KennethWilke commented 2 years ago

Ah, perfect! That makes sense, thank you!

TKIPisalegacycipher commented 2 years ago

Of course @KennethWilke, and thank you for your help and contribution!