Refine input validaton for OSB context annotations + harden defaults - Githubissues

orange-cloudfoundry / cf-ops-automation-broker

On demand dedicated services through COA concourse pipeline engine

4 stars 0 forks source link

Refine input validaton for OSB context annotations + harden defaults #405

Closed gberche-orange closed 3 years ago

gberche-orange commented 3 years ago

Some coab-vars.yaml keys which should not be used in models (those with JSON serialized content) are now white listed

[x] Hardened default accepted characterset in other fields used in models (e.g. deployment_name or + x-osb-cmdb.brokered_service_instance_guid) and associated refined assertions: now rejects forward slash

Fixes https://github.com/orange-cloudfoundry/cf-ops-automation-broker/issues/404

[x] add deployment.coabVarsInputValidationDisabled property to transiently disable input validation as a hot fix in production