This repository was archived by the owner on Jan 21, 2022. It is now read-only.
This repository was archived by the owner on Jan 21, 2022. It is now read-only.
Support for URLs in usage docs (org,space,consumer) #426
Open
Description
If a resource provider needs to define its own schema for one of the fields in the usage doc (account, org, space, consumer) it can do so with URL-like string. However currently we do not support /
since we do not URL-encode the values.
This means that:
- we now support strings as
us-east:<guid>
orapp:<guid>
, but we cannot handle more complex entities likedomain:<app name>/tenant/<guid>
- we might be vulnerable to attacks such as path traversal