Add missing start-of-string anchor to regexps.

usecallmanagernz · Nov 5, 2020 · f519f9d · f519f9d
1 parent f3cecf3
commit f519f9d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/authentication.py b/authentication.py
@@ -25,7 +25,7 @@ def before_request():
     device_name = request.args.get('devicename', '')
 
     # check that the device name is valid
-    if not re.search(r'(?x) SEP [0-9A-F]{12} $', device_name) or \
+    if not re.search(r'(?x) ^ SEP [0-9A-F]{12} $', device_name) or \
        not os.path.exists(f'{config.tftpboot_dir}/{device_name}.cnf.xml'):
         return Response('ERROR'), 403
 

diff --git a/problem_report.py b/problem_report.py
@@ -27,7 +27,7 @@ def problem_report():
 def before_request():
     device_name = request.form.get('devicename', '')
 
-    if not re.search(r'(?x) SEP [0-9A-F]{12} $', device_name) or \
+    if not re.search(r'(?x) ^ SEP [0-9A-F]{12} $', device_name) or \
        not os.path.exists(f'{config.tftpboot_dir}/{device_name}.cnf.xml'):
         return Response('Invalid device', mimetype = 'text/plain'), 403