From ab2cbbc95c281bc0fb9f7020ba2baee467e0124e Mon Sep 17 00:00:00 2001 From: ale <ale@incal.net> Date: Wed, 27 Nov 2024 13:04:05 +0000 Subject: [PATCH] Fix service validation Removes an arbitrary limit on the maximum length of TLDs used for SSO services. --- server/service.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/service.go b/server/service.go index b8a699ec..ed5d29a4 100644 --- a/server/service.go +++ b/server/service.go @@ -31,7 +31,7 @@ var ( // group ACLs do not match the current ticket. ErrUnauthorized = errors.New("unauthorized") - serviceRx = regexp.MustCompile(`^(?:(?:[a-z0-9][-a-z0-9]*\.)+[a-z]{2,4}|localhost)(?::[0-9]{2,5})?(?:/.*)?/$`) + serviceRx = regexp.MustCompile(`^(?:(?:[a-z0-9][-a-z0-9]*\.)+[a-z]{2,}|localhost)(?::[0-9]{2,5})?(?:/.*)?/$`) ) // LoginService provides the business logic for the SSO server, -- GitLab