Larry McCay created KNOX-3409:
---------------------------------
Summary: Validate knoxauth theme name to Harden the Branding
Support
Key: KNOX-3409
URL: https://issues.apache.org/jira/browse/KNOX-3409
Project: Apache Knox
Issue Type: Improvement
Components: Server
Reporter: Larry McCay
Assignee: Larry McCay
Fix For: 3.0.0
The 'theme' query param is too open to user manipulation of the input.
We need to harden the validation of the input to only accept what has been
explictly configured and provided as a directory name for the theme.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
