public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BackendSrv: remove ampersand in validatePath (#109725)

Browse Source 
remove ampersand from fetch URL split

Co-authored-by: Isaiah Grigsby <isaiah.grigsby@grafana.com>
This commit is contained in:
Kristian Bremberg
2025-08-27 18:30:06 +00:00
committed by GitHub
co-authored by Isaiah Grigsby
parent 93a35fc7be
commit be4dc6fdb6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/grafana-data/src/text/sanitize.ts
+1 -1
View File
@@ -156,7 +156,7 @@ export function validatePath<OriginalPath extends string>(path: OriginalPath): O
}
// Remove query params and fragments to check only the path portion
const cleaned = originalDecoded.split(/[\?&#]/)[0];
const cleaned = originalDecoded.split(/[\?#]/)[0];
originalDecoded = cleaned;
// If the original string contains traversal attempts, block it