cf-abacus
cf-abacus copied to clipboard
Support for URLs in usage docs (org,space,consumer)
If a resource provider needs to define its own schema for one of the fields in the usage doc (account, org, space, consumer) it can do so with URL-like string. However currently we do not support /
since we do not URL-encode the values.
This means that:
- we now support strings as
us-east:<guid>
orapp:<guid>
, but we cannot handle more complex entities likedomain:<app name>/tenant/<guid>
- we might be vulnerable to attacks such as path traversal
We have created an issue in Pivotal Tracker to manage this:
https://www.pivotaltracker.com/story/show/130623749
The labels on this github issue will be updated when the story is started.