You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/23 12:51:04 UTC
[PR] Reject trailing chars after a numeric OID matching rule in FilterBuilder [directory-ldap-api]
coheigea opened a new pull request, #334:
URL: https://github.com/apache/directory-ldap-api/pull/334
Reject trailing chars after a numeric OID matching rule in FilterBuilder
AbstractFilter.checkMatchingRule() validated a numeric-OID matching rule
with AttributeUtils.parseOID() but ignored the position it returned, so
anything after a valid OID prefix was accepted and concatenated unescaped
into the filter (e.g. "2.5.13.2:=x)(uid=admin"). The whole operand must
now be consumed by the OID parser, otherwise an IllegalArgumentException
is thrown.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org
Re: [PR] Reject trailing chars after a numeric OID matching rule in FilterBuilder [directory-ldap-api]
Posted by "elecharny (via GitHub)" <gi...@apache.org>.
elecharny merged PR #334:
URL: https://github.com/apache/directory-ldap-api/pull/334
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org