You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If the user adds a double quote to the message either in RejectRequest or RejectSettings, the go SDK does not properly escape them and an invalid JSON is produced that will later be troublesome, either for the policy-server or for kwctl through the policy-evaluator.
We need to escape the JSON produced by the policy author, but given the limitations of TinyGo this does not seem to be a trivial operation.
The text was updated successfully, but these errors were encountered:
If the user adds a double quote to the message either in
RejectRequest
orRejectSettings
, the go SDK does not properly escape them and an invalid JSON is produced that will later be troublesome, either for thepolicy-server
or forkwctl
through thepolicy-evaluator
.We need to escape the JSON produced by the policy author, but given the limitations of TinyGo this does not seem to be a trivial operation.
The text was updated successfully, but these errors were encountered: