Attachment #861006 for bug #905411




  gvm_validator_add (validator, "asset_name", "(?s)^.*$");
  gvm_validator_add (validator, "asset_type", "^(host|os)$");
  gvm_validator_add (validator, "asset_id",
                     "^([[:alnum:]\\-_.:\\/~()']|&amp;)+$");
  gvm_validator_add (validator, "auth_algorithm", "^(md5|sha1)$");
  gvm_validator_add (validator, "auth_method", "^(0|1|2)$");
  /* Defined in RFC 2253. */

  gvm_validator_add (validator, "list_fname",
                     "^([[:alnum:]_-]|%[%CcDFMmNTtUu])+$");
  /* Used for users, credentials, and scanner login name. */
  gvm_validator_add (validator, "login", "^[[:alnum:]\\-_@.]+$");
  gvm_validator_add (validator, "lsc_password", "^.*$");
  gvm_validator_add (validator, "max_result", "^[0-9]+$");
  gvm_validator_add (validator, "max_groups", "^-?[0-9]+$");

  gvm_validator_add (validator, "note_required", "(?s)^(.)+$");
  gvm_validator_add (validator, "note_id", "^[a-z0-9\\-]+$");
  gvm_validator_add (validator, "override_id", "^[a-z0-9\\-]+$");
  gvm_validator_add (validator, "name", "^[#\\-_[:alnum:], \\./]*$");
  gvm_validator_add (validator, "info_name", "(?s)^.*$");
  gvm_validator_add (validator, "info_type", "(?s)^.*$");
  gvm_validator_add (validator, "info_id",
                     "^([[:alnum:]\\-_.:\\/~()']|&amp;)+$");
  gvm_validator_add (validator, "details", "^[0-1]$");
  /* Number is special cased in params_mhd_validate to remove the space. */
  gvm_validator_add (validator, "number", "^ *[0-9]+ *$");

    "filter|group|host|info|nvt|note|os|ovaldef|override|permission|port_list|"
    "report|report_format|result|role|scanner|schedule|tag|target|task|ticket|"
    "tls_certificate|user|vuln|)$");
  gvm_validator_add (validator, "resource_id", "^[[:alnum:]\\-_.:\\/~]*$");
  gvm_validator_add (validator, "resources_action", "^(|add|set|remove)$");
  gvm_validator_add (
    validator, "optional_resource_type",

  gvm_validator_add (validator, "uuid", "^[0-9abcdefABCDEF\\-]{1,40}$");
  gvm_validator_add (validator, "usage_type", "^(audit|policy|scan|)$");
  /* This must be "login" with space and comma. */
  gvm_validator_add (validator, "users", "^[[:alnum:]\\-_@., ]*$");
  gvm_validator_add (validator, "x_field", "^[\\[\\]_[:alnum:]]+$");
  gvm_validator_add (validator, "y_fields:name", "^[0-9]+$");
  gvm_validator_add (validator, "y_fields:value", "^[\\[\\]_[:alnum:]]+$");

Return to bug 905411

Lines 478-484 Link Here

(-)a/src/gsad.c (-6 / +7 lines)
478	gvm_validator_add (validator, "asset_name", "(?s)^.*$");	478	gvm_validator_add (validator, "asset_name", "(?s)^.*$");
479	gvm_validator_add (validator, "asset_type", "^(host\|os)$");	479	gvm_validator_add (validator, "asset_type", "^(host\|os)$");
480	gvm_validator_add (validator, "asset_id",	480	gvm_validator_add (validator, "asset_id",
481	"^([[:alnum:]-_.:\\/~()']\|&)+$");	481	"^([[:alnum:]\\-_.:\\/~()']\|&)+$");
482	gvm_validator_add (validator, "auth_algorithm", "^(md5\|sha1)$");	482	gvm_validator_add (validator, "auth_algorithm", "^(md5\|sha1)$");
483	gvm_validator_add (validator, "auth_method", "^(0\|1\|2)$");	483	gvm_validator_add (validator, "auth_method", "^(0\|1\|2)$");
484	/* Defined in RFC 2253. */	484	/* Defined in RFC 2253. */
Lines 595-601 Link Here
595	gvm_validator_add (validator, "list_fname",	595	gvm_validator_add (validator, "list_fname",
596	"^([[:alnum:]_-]\|%[%CcDFMmNTtUu])+$");	596	"^([[:alnum:]_-]\|%[%CcDFMmNTtUu])+$");
597	/* Used for users, credentials, and scanner login name. */	597	/* Used for users, credentials, and scanner login name. */
598	gvm_validator_add (validator, "login", "^[[:alnum:]-_@.]+$");	598	gvm_validator_add (validator, "login", "^[[:alnum:]\\-_@.]+$");
599	gvm_validator_add (validator, "lsc_password", "^.*$");	599	gvm_validator_add (validator, "lsc_password", "^.*$");
600	gvm_validator_add (validator, "max_result", "^[0-9]+$");	600	gvm_validator_add (validator, "max_result", "^[0-9]+$");
601	gvm_validator_add (validator, "max_groups", "^-?[0-9]+$");	601	gvm_validator_add (validator, "max_groups", "^-?[0-9]+$");
Lines 605-614 Link Here
605	gvm_validator_add (validator, "note_required", "(?s)^(.)+$");	605	gvm_validator_add (validator, "note_required", "(?s)^(.)+$");
606	gvm_validator_add (validator, "note_id", "^[a-z0-9\\-]+$");	606	gvm_validator_add (validator, "note_id", "^[a-z0-9\\-]+$");
607	gvm_validator_add (validator, "override_id", "^[a-z0-9\\-]+$");	607	gvm_validator_add (validator, "override_id", "^[a-z0-9\\-]+$");
608	gvm_validator_add (validator, "name", "^[#-_[:alnum:], \\./]*$");	608	gvm_validator_add (validator, "name", "^[#\\-_[:alnum:], \\./]*$");
609	gvm_validator_add (validator, "info_name", "(?s)^.*$");	609	gvm_validator_add (validator, "info_name", "(?s)^.*$");
610	gvm_validator_add (validator, "info_type", "(?s)^.*$");	610	gvm_validator_add (validator, "info_type", "(?s)^.*$");
611	gvm_validator_add (validator, "info_id", "^([[:alnum:]-_.:\\/~()']\|&)+$");	611	gvm_validator_add (validator, "info_id",
		612	"^([[:alnum:]\\-_.:\\/~()']\|&)+$");
612	gvm_validator_add (validator, "details", "^[0-1]$");	613	gvm_validator_add (validator, "details", "^[0-1]$");
613	/* Number is special cased in params_mhd_validate to remove the space. */	614	/* Number is special cased in params_mhd_validate to remove the space. */
614	gvm_validator_add (validator, "number", "^ [0-9]+ $");	615	gvm_validator_add (validator, "number", "^ [0-9]+ $");
Lines 660-666 Link Here
660	"filter\|group\|host\|info\|nvt\|note\|os\|ovaldef\|override\|permission\|port_list\|"	661	"filter\|group\|host\|info\|nvt\|note\|os\|ovaldef\|override\|permission\|port_list\|"
661	"report\|report_format\|result\|role\|scanner\|schedule\|tag\|target\|task\|ticket\|"	662	"report\|report_format\|result\|role\|scanner\|schedule\|tag\|target\|task\|ticket\|"
662	"tls_certificate\|user\|vuln\|)$");	663	"tls_certificate\|user\|vuln\|)$");
663	gvm_validator_add (validator, "resource_id", "^[[:alnum:]-_.:\\/~]*$");	664	gvm_validator_add (validator, "resource_id", "^[[:alnum:]\\-_.:\\/~]*$");
664	gvm_validator_add (validator, "resources_action", "^(\|add\|set\|remove)$");	665	gvm_validator_add (validator, "resources_action", "^(\|add\|set\|remove)$");
665	gvm_validator_add (	666	gvm_validator_add (
666	validator, "optional_resource_type",	667	validator, "optional_resource_type",
Lines 721-727 Link Here
721	gvm_validator_add (validator, "uuid", "^[0-9abcdefABCDEF\\-]{1,40}$");	722	gvm_validator_add (validator, "uuid", "^[0-9abcdefABCDEF\\-]{1,40}$");
722	gvm_validator_add (validator, "usage_type", "^(audit\|policy\|scan\|)$");	723	gvm_validator_add (validator, "usage_type", "^(audit\|policy\|scan\|)$");
723	/* This must be "login" with space and comma. */	724	/* This must be "login" with space and comma. */
724	gvm_validator_add (validator, "users", "^[[:alnum:]-_@., ]*$");	725	gvm_validator_add (validator, "users", "^[[:alnum:]\\-_@., ]*$");
725	gvm_validator_add (validator, "x_field", "^[\\[\\]_[:alnum:]]+$");	726	gvm_validator_add (validator, "x_field", "^[\\[\\]_[:alnum:]]+$");
726	gvm_validator_add (validator, "y_fields:name", "^[0-9]+$");	727	gvm_validator_add (validator, "y_fields:name", "^[0-9]+$");
727	gvm_validator_add (validator, "y_fields:value", "^[\\[\\]_[:alnum:]]+$");	728	gvm_validator_add (validator, "y_fields:value", "^[\\[\\]_[:alnum:]]+$");