tangled.org / core

Monorepo for Tangled — https://tangled.org

Bug: malformed SSH pubkeys are accepted and added to a user’s record #182

open

opened by

geesawra.industries 3 months ago

When adding a new SSH key to a user’s profile, key validation might accept malformed keys: https://pdsls.dev/at://did:plc:6ll5xi67lyuyovt6fiv4fnjo/sh.tangled.publicKey/3lwlkst2pjn22

Strings that are deliberately malformed are correctly refused, while strings that contain e.g. multiple pubkeys are accepted, and the resulting record string contains both of them in the key field: https://pdsls.dev/at://did:plc:6ll5xi67lyuyovt6fiv4fnjo/sh.tangled.publicKey/3lwll72k2u222

sign up or login to add to the discussion

Labels

None yet.

area

None yet.

assignee

None yet.

Participants 1

AT URI

at://did:plc:6ll5xi67lyuyovt6fiv4fnjo/sh.tangled.repo.issue/3lwllabhlew22