Restrict Docker image regex

Fixes Azure#5259.
onalante-msft · Sep 3, 2021 · d29bd07 · d29bd07
1 parent 5288a27
commit d29bd07
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/edge-agent/src/Microsoft.Azure.Devices.Edge.Agent.Docker/DockerConfig.cs b/edge-agent/src/Microsoft.Azure.Devices.Edge.Agent.Docker/DockerConfig.cs
@@ -15,7 +15,7 @@ namespace Microsoft.Azure.Devices.Edge.Agent.Docker
     public class DockerConfig : IEquatable<DockerConfig>
     {
         // This is not the actual docker image regex, but a less strict version.
-        const string ImageRegexPattern = @"^(?<repo>([^/]*/)*)(?<image>[^/:]+)(?<tag>:[^/:]+)?$";
+        const string ImageRegexPattern = @"^(?<repo>([^/]*/)*)(?<image>[^@/:]+)(?<tag>(:[^@/:]+)|(@sha256:[^@/:]+))?$";
         static readonly Regex ImageRegex = new Regex(ImageRegexPattern);
         readonly CreateContainerParameters createOptions;