TWSD-1094 - Security Alert – Vulnerability Identified in TWSD-1021 (DeMac)

Review Request #1063 — Created Sept. 17, 2025 and updated

Information
shuinvy
AG
rel_ag_9_4_5
TWSD-1094
Reviewers
evalin, jasonchou, milliechou, peteryeh, timlai, timsu 
Add restriction to user input for license code
    

  1. User input license code and pass to API code, I restrict the code can only use A-Z, a-z, 0-9, and # - _ + / = (only 6 special characters). so user cannot input command line to the field.
    2. 

  2. If user input invalid character in the license code field, there is warning show: "License code format error!";"
    3. 

  3. There is a API for no validate licese update CLI, for safety, I removed the code.
    4.
Loading...