From 7591f3f092a49b63a71c350114831b76fb2f4fcd Mon Sep 17 00:00:00 2001 From: snipe Date: Thu, 30 Jun 2022 15:15:49 -0700 Subject: [PATCH] Added auth filter check regex Signed-off-by: snipe --- app/Http/Controllers/SettingsController.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/app/Http/Controllers/SettingsController.php b/app/Http/Controllers/SettingsController.php index ab2add1e8e..8ac0b3622b 100755 --- a/app/Http/Controllers/SettingsController.php +++ b/app/Http/Controllers/SettingsController.php @@ -917,11 +917,13 @@ class SettingsController extends Controller $messages = [ 'ldap_username_field.not_in' => 'sAMAccountName (mixed case) will likely not work. You should use samaccountName (lowercase) instead. ', 'ldap_auth_filter_query.not_in' => 'uid=samaccountname is probably not a valud auth filter. You probably want uid= ', + 'ldap_filter.regex' => 'This value should probably not be wrapped in parentheses.', ]; $validator = Validator::make($setting->toArray(), [ 'ldap_username_field' => 'not_in:sAMAccountName', 'ldap_auth_filter_query' => 'not_in:uid=samaccountname', + 'ldap_filter' => 'regex:"^[^(]"', ], $messages);