You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/23 12:51:04 UTC

[PR] Reject trailing chars after a numeric OID matching rule in FilterBuilder [directory-ldap-api]

coheigea opened a new pull request, #334:
URL: https://github.com/apache/directory-ldap-api/pull/334

   Reject trailing chars after a numeric OID matching rule in FilterBuilder
   AbstractFilter.checkMatchingRule() validated a numeric-OID matching rule
   with AttributeUtils.parseOID() but ignored the position it returned, so
   anything after a valid OID prefix was accepted and concatenated unescaped
   into the filter (e.g. "2.5.13.2:=x)(uid=admin"). The whole operand must
   now be consumed by the OID parser, otherwise an IllegalArgumentException
   is thrown.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org


Re: [PR] Reject trailing chars after a numeric OID matching rule in FilterBuilder [directory-ldap-api]

Posted by "elecharny (via GitHub)" <gi...@apache.org>.
elecharny merged PR #334:
URL: https://github.com/apache/directory-ldap-api/pull/334


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org