bitwarden/server
1
0
Fork 0
mirror of https://github.com/bitwarden/server synced 2025-12-19 17:53:44 +00:00
Code Issues Releases Wiki Activity

add proper URI validation to duo host (#1984)

Browse Source
This commit is contained in:
Kyle Spearrin
2022-05-09 12:00:05 -04:00
committed by GitHub
parent 43be1d3647
commit a5bfc0554b
2 changed files with 20 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/Api/Models/Request/TwoFactorRequestModels.cs
View File

@@ -105,7 +105,7 @@ namespace Bit.Api.Models.Request
public IEnumerable<ValidationResult> Validate(ValidationContext validationContext)
{
if (!Host.StartsWith("api-") || (!Host.EndsWith(".duosecurity.com") && !Host.EndsWith(".duofederal.com")))
if (!Core.Utilities.Duo.DuoApi.ValidHost(Host))
{
yield return new ValidationResult("Host is invalid.", new string[] { nameof(Host) });
}