consul/agent/config
Kyle Havlovitz f4c3e54b11
auto-config: relax node name validation for JWT authorization (#15370)
* auto-config: relax node name validation for JWT authorization

This changes the JWT authorization logic to allow all non-whitespace,
non-quote characters when validating node names. Consul had previously
allowed these characters in node names, until this validation was added
to fix a security vulnerability with whitespace/quotes being passed to
the `bexpr` library. This unintentionally broke node names with
characters like `.` which aren't related to this vulnerability.

* Update website/content/docs/agent/config/cli-flags.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2022-11-14 18:24:40 -06:00
..
testdata
agent_limits.go
builder.go auto-config: relax node name validation for JWT authorization (#15370) 2022-11-14 18:24:40 -06:00
builder_oss.go
builder_oss_test.go
builder_test.go
config.go
config_oss.go
default.go
default_oss.go
deprecated.go
deprecated_test.go
doc.go
file_watcher.go
file_watcher_test.go
flags.go
flags_test.go
flagset.go
golden_test.go
limits.go
limits_windows.go
merge.go
merge_test.go
ratelimited_file_watcher.go
ratelimited_file_watcher_test.go
runtime.go
runtime_oss.go
runtime_oss_test.go
runtime_test.go
segment_oss.go
segment_oss_test.go