moby--moby/utils/names.go

package utils

import "regexp"

// RestrictedNameChars collects the characters allowed to represent a name, normally used to validate container and volume names.
const RestrictedNameChars = `[a-zA-Z0-9][a-zA-Z0-9_.-]`

// RestrictedNamePattern is a regular expression to validate names against the collection of restricted characters.
var RestrictedNamePattern = regexp.MustCompile(`^` + RestrictedNameChars + `+$`)
Move volume name validation to the local driver. Delegate validation tasks to the volume drivers. It's up to them to decide whether a name is valid or not. Restrict volume names for the local driver to prevent creating mount points outside docker's volumes directory. Signed-off-by: David Calavera <david.calavera@gmail.com> 2015-10-20 17:09:48 +00:00			`package utils`

			`import "regexp"`

			`// RestrictedNameChars collects the characters allowed to represent a name, normally used to validate container and volume names.`
			const RestrictedNameChars = `[a-zA-Z0-9][a-zA-Z0-9_.-]`

			`// RestrictedNamePattern is a regular expression to validate names against the collection of restricted characters.`
Restrict checkpoint name to prevent directory traversal This fix tries to address the issue raised in 28769 where checkpoint name was not checked before passing to containerd. As a result, it was possible to use a special checkpoint name to get outside of the container's directory. This fix add restriction `[a-zA-Z0-9][a-zA-Z0-9_.-]+` (`RestrictedNamePattern`). This is the same as container name restriction. This fix fixes 28769. Signed-off-by: Yong Tang <yong.tang.github@outlook.com> 2016-11-23 19:45:35 +00:00			var RestrictedNamePattern = regexp.MustCompile(`^` + RestrictedNameChars + `+$`)