Description
When generating a new API key in the Developer Portal, the inputs for IP Address and Referrer ID under the Security Restriction settings lack proper validation. Users can input any arbitrary text string instead of valid IP addresses or properly formatted referrer patterns, and the system still successfully generates the key.
Steps to Reproduce
Validate the ip address input field
- Sign in to the Developer Portal and go to the API keys tab of a particular API.
- click on Generate API Key.
- Provide a name and select Production or Sandbox as the Key Type and rest of the details.
- Change the Security Restriction dropdown from "None" to "IP Address".
- Enter a random string into the restriction value field.
- Click Generate API Key.
Validate the referrer input field
- Sign in to the Developer Portal and go to the API keys tab of a particular API.
- click on Generate API Key.
- Provide a name and select Production or Sandbox as the Key Type and rest of the details.
- Change the Security Restriction dropdown from "None" to "Referrer".
- Enter a random string(non url) into the restriction value field.
- Click Generate API Key.
Version
4.7.0
Environment Details (with versions)
No response
Description
When generating a new API key in the Developer Portal, the inputs for IP Address and Referrer ID under the Security Restriction settings lack proper validation. Users can input any arbitrary text string instead of valid IP addresses or properly formatted referrer patterns, and the system still successfully generates the key.
Steps to Reproduce
Validate the ip address input field
Validate the referrer input field
Version
4.7.0
Environment Details (with versions)
No response