[VALIDATOR-411] UrlValidator accepts ports above max limit of 16-bit unsigned integer

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.1
• Fix Version/s: 1.6
• Component/s: Routines
• Assignee: Unassigned
• Reporter: Michael Osipov
• Created: 07/Jan/17 12:43
• Updated: 22/Feb/17 16:36
• Resolved: 04/Feb/17 14:02

Description

Such a value http://host.organization.com:100000 is gladly accepted because the port ins never parsed and boundaries not checked.

public static void main(String[] args) {
  UrlValidator validator = UrlValidator.getInstance();
  System.out.println(validator.isValid("http://host.organization.com:100000"));
}

Issue Links

• is required by: MSHARED-609 Partially revert MSHARED-429