zware/awx
1
0
Fork 0
mirror of https://github.com/ZwareBear/awx.git synced 2026-04-14 12:01:50 -05:00
Code Issues Packages Projects Releases Wiki Activity

enforce strings for secret password inputs on Credentials

Browse Source 
see: https://github.com/ansible/ansible-tower/issues/7898
This commit is contained in:
Ryan Petrello
2018-02-12 16:10:26 -05:00
parent bd2f1568fb
commit 82e41b40bb
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
awx/main/fields.py
View File

@@ -499,6 +499,12 @@ class CredentialInputField(JSONSchemaField):
v != '$encrypted$', v != '$encrypted$',
model_instance.pk model_instance.pk
]): ]):
if not isinstance(getattr(model_instance, k), six.string_types):
raise django_exceptions.ValidationError(
_('secret values must be of type string, not {}').format(type(v).__name__),
code='invalid',
params={'value': v},
)
decrypted_values[k] = utils.decrypt_field(model_instance, k) decrypted_values[k] = utils.decrypt_field(model_instance, k)
else: else:
decrypted_values[k] = v decrypted_values[k] = v