security: GHSA-xx6g-43w2-9g6g (MODERATE) Email argument makes compliance harder, enables log injection
This commit is contained in:
parent
ac0852aad4
commit
bc5e9fbe1e
|
|
@ -250,13 +250,10 @@ func typecheckChoiceEntity(value string, arg *config.ActionArgument) error {
|
|||
|
||||
func typeSafetyCheckEmail(value string) error {
|
||||
_, err := mail.ParseAddress(value)
|
||||
|
||||
log.Errorf("Email check: %v, %v", err, value)
|
||||
|
||||
if err != nil {
|
||||
log.WithField("type", "email").Debugf("Email argument type check failed")
|
||||
return err
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue