Client UUID not validated
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
| zaqar |
Medium
|
Zhihao Yuan |
Bug Description
We need to validate all input. Client UUID is currently never looked at; we should verify that it is of a sane length and has expected characters. In fact, due to the confusion user's have had with client UUID, I propose defining it more strictly to either be an integer or a true UUID.
Fix proposed to branch: master
Review: https:/
Changed in marconi: | |
status: | New → In Progress |
Reviewed: https:/
Committed: http://
Submitter: Jenkins
Branch: master
commit cef47c68e50ef79
Author: Zhihao Yuan <email address hidden>
Date: Wed Oct 2 10:33:41 2013 -0400
feat(api): Client-ID as a real UUID
We store the UUID in binary form in DBs, and perform checking
on user inputs. Compared with the hex form we currently using,
the binary form saves half space to store. In addition, by
enforcing UUID on the server side, we can minimize the chance of
client ID collision.
Change-Id: Ic3048a0d2aa21b
Closes-Bug: 1233420
Changed in marconi: | |
status: | In Progress → Fix Committed |
Changed in marconi: | |
milestone: | none → icehouse-1 |
status: | Fix Committed → Fix Released |
Changed in marconi: | |
milestone: | icehouse-1 → 2014.1 |
Benefit: store UUID in bytes form in DB