Skip to content

Defense in depth for authorized_keys lines

Jacob Vosmaer requested to merge key-validations into master

Validate the key_id and public_key inputs when rendering the actual 'line' we append to authorized_keys. Although these inputs are either trusted (key_id) or validated earlier (public_key) it does not hurt to take a little extra care that we do not write unintended data to the authorized_keys file.

Merge request reports