caution-config: validate domain and provider IDs at parse time #328

Merged

vkobel merged 0 commits from refs/pull/328/head into main

2026-06-29 05:11:22 +00:00

vkobel commented

2026-06-27 07:27:16 +00:00

(Migrated from codeberg.org)

domain and the provider AWS ids (vpc_id, subnet_ids, security_group_id) flow unescaped into generated Terraform, the bootstrap script, and the Caddy config. Validate them at parse time (Procfile + HCL) — strict DNS name for domain, strict -<8|17 hex> for the ids so no shell/HCL metacharacters survive parsing

domain and the provider AWS ids (vpc_id, subnet_ids, security_group_id) flow unescaped into generated Terraform, the bootstrap script, and the Caddy config. Validate them at parse time (Procfile + HCL) — strict DNS name for domain, strict <prefix>-<8|17 hex> for the ids so no shell/HCL metacharacters survive parsing

vkobel commented

2026-06-27 07:57:22 +00:00

(Migrated from codeberg.org)

We should probably have a look at current domains and values to ensure no deployed app have weird looking patterns in what is fixed here

No reviewers

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

public/platform!328

No description provided.

Rows
Columns