com.backnd.database 0.0.9 → 0.0.10

package/Client.cs

@@ -2,6 +2,7 @@ using System;
 using System.Collections.Generic;
 using System.Linq;
 using System.Text;
+using System.Text.RegularExpressions;
 using System.Threading;
 
 using BACKND.Database.Exceptions;
@@ -19,6 +20,12 @@ namespace BACKND.Database
 
         private readonly Dictionary<Type, bool> createdTables = new Dictionary<Type, bool>();
 
+        // HTTP 헤더 유효성 검사용 정규식 (RFC 7230 준수)
+        // 헤더 키: 토큰 형식 (영문자, 숫자, !#$%&'*+-.^_`|~)
+        private static readonly Regex ValidHeaderKeyRegex = new Regex(@"^[A-Za-z0-9!\#\$%&'\*\+\-\.\^_`\|~]+$", RegexOptions.Compiled);
+        // 헤더 값: ASCII 인쇄 가능 문자만 허용 (32~126)
+        private static readonly Regex ValidHeaderValueRegex = new Regex(@"^[\x20-\x7E]*$", RegexOptions.Compiled);
+
         private readonly Queue<QueuedRequest> requestQueue = new Queue<QueuedRequest>();
         private readonly Queue<QueuedRequest> highPriorityQueue = new Queue<QueuedRequest>();
         private readonly object queueLock = new object();
@@ -28,11 +35,37 @@ namespace BACKND.Database
 
         public Client(string uuid)
         {
-            headers["database_uuid"] = uuid;
+            SetHeader("database_uuid", uuid);
 
             this.queueCancellationSource = new CancellationTokenSource();
         }
 
+        private static bool IsValidHeaderKey(string key)
+        {
+            return !string.IsNullOrEmpty(key) && ValidHeaderKeyRegex.IsMatch(key);
+        }
+
+        private static bool IsValidHeaderValue(string value)
+        {
+            return string.IsNullOrEmpty(value) || ValidHeaderValueRegex.IsMatch(value);
+        }
+
+        private bool SetHeader(string key, string value)
+        {
+            if (!IsValidHeaderKey(key))
+            {
+                return false;
+            }
+
+            if (!IsValidHeaderValue(value))
+            {
+                return false;
+            }
+
+            headers[key] = value;
+            return true;
+        }
+
         public async BTask Initialize()
         {
             if (initialized)
@@ -48,15 +81,24 @@ namespace BACKND.Database
             }
 
             var json = Newtonsoft.Json.Linq.JObject.Parse(userInfoResult.ReturnValue);
-            headers["x-gamerid"] = json["row"]["gamerId"].ToString();
+            var gamerId = json["row"]["gamerId"]?.ToString();
+            if (!SetHeader("x-gamerid", gamerId))
+            {
+                UnityEngine.Debug.LogError("please check backnd login state - invalid gamerId");
+                return;
+            }
 
             var settings = BackEnd.Backend.GetBackndChatSettings();
             foreach (var header in settings)
             {
-                headers[header.Key] = header.Value;
-            }
+                if (headers.ContainsKey(header.Key) && !string.IsNullOrEmpty(headers[header.Key]))
+                    continue;
 
-            //headers["x-gamerid"] = "40a1f3f0-19a1-11f0-9ee9-c1c83fc196eb";
+                if (string.IsNullOrEmpty(header.Value))
+                    continue;
+
+                SetHeader(header.Key, header.Value);
+            }
 
             StartQueueProcessing();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "com.backnd.database",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "displayName": "BACKND Database",
   "description": "BACKND Database is a Unity SDK for seamless integration with BACKND cloud database services.\n\nEasily manage and synchronize game data such as player profiles, game states, and leaderboards across multiple platforms.\nIdeal for Unity developers looking to implement robust database solutions without complex backend setups.",
   "unity": "2021.3",