fix: DDOS security hotspot

ministero-salute · Dec 18, 2024 · db5497c · db5497c
1 parent 495a880
commit db5497c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/it/finanze/sanita/fse2/ms/gtw/dispatcher/service/impl/JwtSRV.java b/src/main/java/it/finanze/sanita/fse2/ms/gtw/dispatcher/service/impl/JwtSRV.java
@@ -259,7 +259,7 @@ private ValidationException buildValidationException() {
 
 
 	public void isValidLocality(String input) {
-		String regex = "^[a-zA-Z0-9]+[^\\^]*\\^\\^\\^\\^\\^\\&[^&]*\\&ISO\\^\\^\\^\\^[^\\^&]*$";
+		String regex = "[a-zA-Z0-9]+[^\\^\\\\]*\\\\\\^\\^\\^\\^\\^\\&[^\\&]*\\&ISO\\\\\\^\\^\\^\\^\\[^\\^&]*$";
 		boolean isValid = Pattern.matches(regex, input);
 		if (!isValid) {
 			throw buildValidationException();