Function UserSecretValueValid

codersdk/usersecretvalidation.go:298–308

UserSecretValueValid validates a user secret value as bytes submitted by the user (plaintext). The value must not contain null bytes and must not exceed MaxUserSecretValueBytes. The DB trigger separately enforces a stored-bytes env aggregate at the same numeric cap; under encryption the trigger may

(value string)

// that pass this check. See MaxUserSecretValueBytes for the
// dual-enforcement explanation.
func UserSecretValueValid(value string) error {
	if strings.Contains(value, "\x00") {
		return xerrors.New("secret value must not contain null bytes")
	}

	if len(value) > MaxUserSecretValueBytes {
		return xerrors.Errorf("secret value must not exceed %d bytes", MaxUserSecretValueBytes)
	}

	return nil
}