fix: reject HP_SHARED_KEY with FRP-incompatible characters (#104)

* fix: reject HP_SHARED_KEY containing characters that break FRP TOML config

Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>

* chore: bump /info endpoint version to 0.4

Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>

* fix: move HP_SHARED_KEY validation after strip_quotes and stop rejecting apostrophes

Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>

---------

Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>

Author: oleksandr-nc

haproxy_agent.py

@@ -728,7 +728,7 @@ async def get_info(request: web.Request):
             k8s_status["reachable"] = False
 
     return web.json_response({
-        "version": 0.3,
+        "version": 0.4,
         "docker": True,
         "kubernetes": k8s_status,
     })

start.sh

@@ -127,6 +127,19 @@ fi
 HP_SHARED_KEY="$(strip_quotes "$HP_SHARED_KEY")"
 export HP_SHARED_KEY
 
+# After stripping any surrounding quotes, the remaining value must not contain
+# characters that would corrupt the generated FRP TOML config line
+# `metadatas.token = "..."`:
+#   "  - terminates the TOML basic string
+#   \  - starts a TOML escape sequence inside that string
+FORBIDDEN_COUNT=$(printf '%s' "$HP_SHARED_KEY" | LC_ALL=C tr -cd '"\\' | wc -c)
+if [ "$FORBIDDEN_COUNT" -gt 0 ]; then
+    echo "ERROR: HP_SHARED_KEY contains a forbidden character."
+    echo "The following characters are not allowed: double quote (\"), backslash (\\)."
+    echo "Please choose a password without these characters."
+    exit 1
+fi
+
 # Strip surrounding quotes from other commonly affected environment variables
 NC_INSTANCE_URL="$(strip_quotes "$NC_INSTANCE_URL")"
 HP_FRP_ADDRESS="$(strip_quotes "$HP_FRP_ADDRESS")"