JSON request filter allows ids in matchexpressions

cryostatio · Mar 22, 2024 · f7f6c91 · f7f6c91
1 parent 3379e9b
commit f7f6c91
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/io/cryostat/JsonRequestFilter.java b/src/main/java/io/cryostat/JsonRequestFilter.java
@@ -33,7 +33,8 @@
 public class JsonRequestFilter implements ContainerRequestFilter {
 
     static final Set<String> disallowedFields = Set.of("id");
-    static final Set<String> allowedPaths = Set.of("/api/v2.2/discovery");
+    static final Set<String> allowedPaths =
+            Set.of("/api/v2.2/discovery", "/api/beta/matchexpressions");
 
     private final ObjectMapper objectMapper = new ObjectMapper();