homeassistant: Check invalid characters in user

2023-01-29 21:41:01 +00:00 · 2023-01-29 21:41:01 +00:00 · 9946bd838b
commit 9946bd838b
parent c5802078c4
1 changed files with 4 additions and 0 deletions
--- a/roles/homeassistant/files/auth-command.sh
+++ b/roles/homeassistant/files/auth-command.sh
@ -2,6 +2,10 @@

 set -eu

+if [ "$(echo "$username" | sed -r 's/^[a-z]+$/x/')" != "x" ]; then
+    exit 2
+fi
+
 curl -sf -X POST -H "Content-Type: application/json" -d @- \
    https://id.foo.sh/authcheck <<EOF
 {"username": "${username}", "password": "${password}", "group": "foosh"}