fix: add login component username validation

Signed-off-by: Czékus Máté <[email protected]>
containerd · Jul 14, 2024 · f630815 · f630815
1 parent 95a5fca
commit f630815
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/cmd/nerdctl/login.go b/cmd/nerdctl/login.go
@@ -62,6 +62,10 @@ func processLoginOptions(cmd *cobra.Command) (types.LoginCommandOptions, error)
  return types.LoginCommandOptions{}, err
  }
 
+ if strings.Contains(username, ":") {
+ return types.LoginCommandOptions{}, errors.New("username cannot contain colons")
+ }
+
  if password != "" {
  log.L.Warn("WARNING! Using --password via the CLI is insecure. Use --password-stdin.")
  if passwordStdin {