api
api copied to clipboard
Consider updating user/object regex validation
Here: https://github.com/openfga/api/blob/c96ec773cae9caf2a9536856bf1fa206a42ef7ef/openfga/v1/openfga_service.proto#L1134-L1159
the regexes are not checking for character length or many characters that are likely invalid such as Unicode control characters like U+0000 (null).
Originally posted by @senojj in https://github.com/openfga/openfga/pull/1825#discussion_r1718941081