From 551d7d73f505df65e21ef8531d1a1cc4a2e10c80 Mon Sep 17 00:00:00 2001 From: Benedikt Kulmann Date: Wed, 3 Jun 2020 13:13:27 +0200 Subject: [PATCH] Add changelog item --- changelog/unreleased/input-validation.md | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 changelog/unreleased/input-validation.md diff --git a/changelog/unreleased/input-validation.md b/changelog/unreleased/input-validation.md new file mode 100644 index 0000000000..6d2f12cdb2 --- /dev/null +++ b/changelog/unreleased/input-validation.md @@ -0,0 +1,10 @@ +Change: Introduce input validation + +We set up input validation, starting with enforcing alphanumeric identifier values and UUID +format on account uuids. As a result, traversal into parent folders is not possible anymore. +We also made sure that get and list requests are side effect free, i.e. not creating any folders. + +https://github.com/owncloud/ocis-settings/pull/22 +https://github.com/owncloud/ocis-settings/issues/15 +https://github.com/owncloud/ocis-settings/issues/16 +https://github.com/owncloud/ocis-settings/issues/19