cf-abacus icon indicating copy to clipboard operation
cf-abacus copied to clipboard

Support for URLs in usage docs (org,space,consumer)

Open hsiliev opened this issue 8 years ago • 1 comments

If a resource provider needs to define its own schema for one of the fields in the usage doc (account, org, space, consumer) it can do so with URL-like string. However currently we do not support / since we do not URL-encode the values.

This means that:

  • we now support strings as us-east:<guid> or app:<guid>, but we cannot handle more complex entities likedomain:<app name>/tenant/<guid>
  • we might be vulnerable to attacks such as path traversal

hsiliev avatar Sep 19 '16 08:09 hsiliev

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/130623749

The labels on this github issue will be updated when the story is started.

cf-gitbot avatar Sep 19 '16 08:09 cf-gitbot