From ddb9d5a7637b382be9ac7a96ad023a983c41c342 Mon Sep 17 00:00:00 2001
From: vasraz <vasyl.razinkov@est.tech>
Date: Fri, 14 Oct 2022 13:35:39 +0100
Subject: Fix security risk 'Improper Input Validation'

Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech>
Change-Id: I6a52148aec3b567db43ec57109214e52d106f73c
Issue-ID: SDC-4189
---
 .../panel/panel-header/edit-name-modal/edit-name-modal.component.html | 2 +-
 .../panel/panel-tabs/edit-module-name/edit-module-name.component.html | 2 +-
 catalog-ui/src/assets/languages/en_US.json                            | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

(limited to 'catalog-ui/src')

diff --git a/catalog-ui/src/app/ng2/pages/composition/panel/panel-header/edit-name-modal/edit-name-modal.component.html b/catalog-ui/src/app/ng2/pages/composition/panel/panel-header/edit-name-modal/edit-name-modal.component.html
index 75ee2d520f..3b6575c3aa 100644
--- a/catalog-ui/src/app/ng2/pages/composition/panel/panel-header/edit-name-modal/edit-name-modal.component.html
+++ b/catalog-ui/src/app/ng2/pages/composition/panel/panel-header/edit-name-modal/edit-name-modal.component.html
@@ -23,6 +23,6 @@
         testId="instanceName"></sdc-input>
      <sdc-validation [validateElement]="updateNameInput" (validityChanged)="validityChanged($event)">
         <sdc-required-validator message="Name is required."></sdc-required-validator>
-        <sdc-regex-validator message="Special characters not allowed." [pattern]="pattern"></sdc-regex-validator>
+        <sdc-regex-validator message="HTML elements not permitted in field values." [pattern]="pattern"></sdc-regex-validator>
     </sdc-validation>
 </div>
\ No newline at end of file
diff --git a/catalog-ui/src/app/ng2/pages/workspace/deployment/panel/panel-tabs/edit-module-name/edit-module-name.component.html b/catalog-ui/src/app/ng2/pages/workspace/deployment/panel/panel-tabs/edit-module-name/edit-module-name.component.html
index d5b9d9e9b2..9d38195237 100644
--- a/catalog-ui/src/app/ng2/pages/workspace/deployment/panel/panel-tabs/edit-module-name/edit-module-name.component.html
+++ b/catalog-ui/src/app/ng2/pages/workspace/deployment/panel/panel-tabs/edit-module-name/edit-module-name.component.html
@@ -7,7 +7,7 @@
             [placeHolder]="'Enter Name'">
         </sdc-input>
         <sdc-validation [validateElement]="heatName">
-            <sdc-regex-validator [message]="'Special characters not allowed.'" [pattern]="pattern"></sdc-regex-validator>
+            <sdc-regex-validator [message]="'HTML elements not permitted in field values.'" [pattern]="pattern"></sdc-regex-validator>
         </sdc-validation>
     </div>
     <div class="edit-module-name-label module-name" data-tests-id="'popover-module-name'" sdc-tooltip [tooltip-text]="selectModule.moduleName">{{selectModule.moduleName}}</div>
diff --git a/catalog-ui/src/assets/languages/en_US.json b/catalog-ui/src/assets/languages/en_US.json
index c3a6bc9a4c..fc5445a6c3 100644
--- a/catalog-ui/src/assets/languages/en_US.json
+++ b/catalog-ui/src/assets/languages/en_US.json
@@ -4,7 +4,7 @@
   "VALIDATION_ERROR_MAX_LENGTH": "Max length {{max}} characters.",
   "VALIDATION_ERROR_MIN_LENGTH": "Min length {{min}} characters.",
   "VALIDATION_ERROR_REQUIRED": "{{field}} is required.",
-  "VALIDATION_ERROR_SPECIAL_CHARS_NOT_ALLOWED": "Special characters not allowed.",
+  "VALIDATION_ERROR_SPECIAL_CHARS_NOT_ALLOWED": "HTML elements not permitted in field values.",
   "LABEL_MAX_SIZE_XX": "Max size is up to {{size}}",
   "LABEL_ALL_FIELDS_ARE_MANDATORY": "All fields are mandatory.",
   "VALIDATION_ERROR_BOOLEAN": "Value should be 'TRUE' or 'FALSE'.",
@@ -168,7 +168,7 @@
   "NEW_SERVICE_RESOURCE_ERROR_MAX_LENGTH_128": "Max length 128 characters.",
   "NEW_SERVICE_RESOURCE_ERROR_MAX_LENGTH_1024": "Max length 1024 characters.",
   "NEW_SERVICE_RESOURCE_ERROR_NAME_EXISTS": "Name already exists.",
-  "NEW_SERVICE_RESOURCE_ERROR_SPECIAL_CHARS": "Special characters not allowed.",
+  "NEW_SERVICE_RESOURCE_ERROR_SPECIAL_CHARS": "HTML elements not permitted in field values.",
   "NEW_SERVICE_RESOURCE_ERROR_CATEGORY_REQUIRED": "category is required.",
   "NEW_SERVICE_RESOURCE_ERROR_CATEGORY_NOT_VALID": "Category not valid for base type.",
   "NEW_SERVICE_RESOURCE_ERROR_CONTACT_REQUIRED": "Contact is required.",
-- 
cgit 1.2.3-korg