m-lab / autojoin / 16273674499

90%

push

github

Implement security fixes for input validation (#75)

* Implement security fixes for input validation

- Fix regex patterns with proper anchoring (^pattern$) to prevent injection attacks
- Add port range validation (1-65535) in getPorts function
- Remove JWT token logging from register client to prevent token exposure
- Improve uplink validation with anchored regex pattern

These changes address potential security vulnerabilities while maintaining
backward compatibility for legitimate use cases.

* Add unit tests for security validation improvements

- Add TestIsValidName to verify anchored regex prevents injection
- Add TestIsValidUplink to verify anchored regex prevents injection
- Add TestGetPorts to verify port range validation (1-65535)
- Tests confirm security fixes work as expected

9 of 9 new or added lines in 1 file covered. (100.0%)

1311 of 1460 relevant lines covered (89.79%)

0.99 hits per line