Function parse_env

dstack-util/src/parse_env_file.rs:49–93

(env_json: &[u8], allowed: &BTreeSet<String>)

}

pub fn parse_env(env_json: &[u8], allowed: &BTreeSet<String>) -> Result<BTreeMap<String, String>> {
    const MAX_ITEMS: usize = 1024;
    const MAX_TOTAL_SIZE: usize = 1024 * 1024;

    let data: Data = serde_json::from_slice(env_json).context("Failed to parse env")?;

    if data.env.len() > MAX_ITEMS {
        bail!("Too many environment variables: {}", data.env.len());
    }

    const KEY_REGEX: &str = r"^[a-zA-Z_][a-zA-Z0-9_]*$";
    let key_regex = regex::Regex::new(KEY_REGEX)
        .context("Failed to compile environment key validation regex")?;

    let mut env = BTreeMap::new();
    let mut total_size = 0;

    for Pair { key, value } in data.env {
        if !allowed.contains(&key) {
            warn!("Skipping unauthorized environment variable: {key}");
            continue;
        }
        // Check key length (common Linux limit is 255)
        if key.len() > 255 {
            bail!("Environment variable name too long: {}", key);
        }

        // Check value length (common Linux limit is around 128KB)
        if value.len() > 128 * 1024 {
            bail!("Environment variable value too long for key: {}", key);
        }

        // validate key
        if !key_regex.is_match(&key) {
            bail!("Invalid env key: {}", key);
        }

        total_size += key.len() + value.len();
        if total_size > MAX_TOTAL_SIZE {
            bail!("Environment variables total size too large");
        }
        env.insert(key, value);
    }
    Ok(env)
}

pub fn convert_env_to_str(parsed_env: &BTreeMap<String, String>) -> String {
    #[allow(clippy::format_collect)]