feat(API): Verify input of the base64 encoded kubeconfig.

1Panel-dev · Feb 8, 2021 · fb9d94a · fb9d94a
1 parent 7e8209c
commit fb9d94a
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/gotty/server/handlers.go b/gotty/server/handlers.go
@@ -3,6 +3,7 @@ package server
 import (
 	"bytes"
 	"context"
+	"encoding/base64"
 	"encoding/json"
 	"fmt"
 	"io/ioutil"
@@ -305,6 +306,13 @@ func (server *Server) handleKubeConfigApi(w http.ResponseWriter, r *http.Request
 		w.WriteHeader(406)
 		return
 	}
+	if _, base64err := base64.StdEncoding.DecodeString(request.KubeConfig); base64err != nil {
+		result.Message = "Invalid Base64 Content"
+		json.NewEncoder(w).Encode(result)
+		w.WriteHeader(406)
+		return
+	}
+
 	//fmt.Printf("%+v", requst)
 	token := randomstring.Generate(20)
 	ttyParameter := cache.TtyParameter{