From 0b7f819f82cff78f2e65a37806fa7132fb4dfeaa Mon Sep 17 00:00:00 2001
From: hagbard <vyosdev@derith.de>
Date: Sat, 9 Feb 2019 14:51:46 -0800
Subject: fixes T1238 - Wireguard allows invalid IP's

---
 interface-definitions/wireguard.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'interface-definitions')

diff --git a/interface-definitions/wireguard.xml b/interface-definitions/wireguard.xml
index 7dd1ec044..d7c3bc447 100644
--- a/interface-definitions/wireguard.xml
+++ b/interface-definitions/wireguard.xml
@@ -19,8 +19,11 @@
           <leafNode name="address">
             <properties>
               <help>IP address</help> 
+              <constraint>
+                <validator name="ip-host"/>
+              </constraint>
               <valueHelp>
-                <format>ipv4net</format>
+                <format>ipv4-address</format>
                 <description>IPv4 address and prefix length</description>
               </valueHelp>
               <valueHelp>
@@ -109,6 +112,9 @@
               <leafNode name="allowed-ips">
                 <properties>
                   <help>IP addresses allowed to traverse the peer</help>
+                  <constraint>
+                    <validator name="ip-host"/>
+                  </constraint>
                 <multi/>
                 </properties>
               </leafNode>
-- 
cgit v1.2.3