Skip to content

Missing validation for Security Restrictions (IP Address & Referrer ID) in DevPortal #5093

Description

@rithakith

Description

When generating a new API key in the Developer Portal, the inputs for IP Address and Referrer ID under the Security Restriction settings lack proper validation. Users can input any arbitrary text string instead of valid IP addresses or properly formatted referrer patterns, and the system still successfully generates the key.

Image

Steps to Reproduce

Validate the ip address input field

  1. Sign in to the Developer Portal and go to the API keys tab of a particular API.
  2. click on Generate API Key.
  3. Provide a name and select Production or Sandbox as the Key Type and rest of the details.
  4. Change the Security Restriction dropdown from "None" to "IP Address".
  5. Enter a random string into the restriction value field.
  6. Click Generate API Key.

Validate the referrer input field

  1. Sign in to the Developer Portal and go to the API keys tab of a particular API.
  2. click on Generate API Key.
  3. Provide a name and select Production or Sandbox as the Key Type and rest of the details.
  4. Change the Security Restriction dropdown from "None" to "Referrer".
  5. Enter a random string(non url) into the restriction value field.
  6. Click Generate API Key.

Version

4.7.0

Environment Details (with versions)

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions