fix: When checking incoming and entered data for possible attacks, ca…

…se is now ignored for keywords.
iris-connect · Jun 30, 2022 · 71b9a60 · 71b9a60
1 parent cc3cc2e
commit 71b9a60
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/iris-client-bff/src/main/java/iris/client_bff/core/validation/AttackDetector.java b/iris-client-bff/src/main/java/iris/client_bff/core/validation/AttackDetector.java
@@ -231,15 +231,16 @@ private static Optional<Range<Integer>> findAnyOfKeywordTuples(String str, Strin
 	private static Optional<Range<Integer>> findKeywordTuple(String input, String[] keywordTuple) {
 
 		for (var keyword : keywordTuple) {
-			if (indexOf(input, keyword) < 0) {
+			if (indexOfIgnoreCase(input, keyword) < 0) {
 				return Optional.empty();
 			}
 		}
 
 		var lastKeyword = keywordTuple[keywordTuple.length - 1];
 
 		return Optional
-				.of(Range.between(indexOf(input, keywordTuple[0]), indexOf(input, lastKeyword) + lastKeyword.length() - 1));
+				.of(Range.between(indexOfIgnoreCase(input, keywordTuple[0]),
+						indexOfIgnoreCase(input, lastKeyword) + lastKeyword.length() - 1));
 	}
 
 	private static Optional<Range<Integer>> findSymbolsAtStart(String input, String[] forbiddenSymbolsArray) {