Enforcing Validation of Input Data
Use this procedure to customize the default Python script for data validation at the global and repository levels.
The validateParameter method in the Python script validates data coming into OneData through any point of entry, including the interface, import functions, HTTP channels, and REST-based service calls. This method only validates data requests that are not encrypted. You can define the pattern of characters to validate by using this method.
1. Navigate to the following directory at the global or repository level as required:
Software AG_directory /profiles/ODE/bin/onedata/config/security
2. Open the appropriate Python script file:
Global script file: validate_input.pyRepository script file: Repository Name_validate_input.py 3. Add the required data validations methods to the validateParameter method:
Example for restricting & and # characters in input data:
def validateParameter(value):
def hex(match):
text = match.group();
if text[:2] == "&#":
try:
text = unichr(int(getTextCode(text, 2)));
except:
pass;
return text;
obj=ValidationResponseObject();
invalidParameters = util.ArrayList();
for parametervalue in value:
formattedvalue = urllib.unquote(parametervalue);
formattedvalue = re.sub(hexpattern, hex, formattedvalue);
formattedvalue = ''.join(formattedvalue.split());
if len(formattedvalue) > 0:
patternObj = re.compile(pattern, re.IGNORECASE);
match = re.search(patternObj, formattedvalue);
if match:
invalidParameters.add(parametervalue);
obj.setInvalidParameterValues(invalidParameters);
return obj;
def getTextCode(text, idx):
if (text[len(text)-1]) == ';':
return text[idx:-1];
else:
return text[idx:];
4. Save and close the script file.
OneData immediately applies the data validation script.
Related Topics:
