Skip to content

Sanitize label input data

Filip Aleksic requested to merge faleksic-racktimeout-sanitize into master

What does this MR do and why?

Sanitizes the labels to avoid passing invalid strings to prometheus.

Closes #370604 (closed) #381424 (closed)

Screenshots or screen recordings

/

How to set up and validate locally

  1. Send request to gdk.test/?8\u003c/x
  2. Check curl -ks https://gdk.test/-/metrics | ./promtool check metrics
  3. The promtool should not report any issues in parsing the data

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Filip Aleksic

Merge request reports