supernets/hardlounge
supernets/hardlounge
4
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #3108 from thelounge/xpaw/sanitize-naems

Browse Source 
Sanitize user and real names
This commit is contained in:
Pavel Djundik 2019-03-11 10:23:40 +02:00 committed by GitHub
commit 43315da408
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/models/network.js
View File

@ -70,14 +70,20 @@ Network.prototype.validate = function(client) {
this.nick = this.nick.substring(0, 100); this.nick = this.nick.substring(0, 100);
} }
this.setNick(String(this.nick || Helper.getDefaultNick()).replace(" ", "_")); this.setNick(String(this.nick || Helper.getDefaultNick()).replace(/\s/g, "_"));
if (!this.username) { if (!this.username) {
this.username = this.nick.replace(/[^a-zA-Z0-9]/g, ""); this.username = this.nick.replace(/[^a-zA-Z0-9]/g, "");
} else {
// Remove any whitespace from usernames as that is not valid
this.username = this.username.replace(/\s/g, "_").substring(0, 100);
} }
if (!this.realname) { if (!this.realname) {
this.realname = "The Lounge User"; this.realname = "The Lounge User";
} else {
// Remove newlines from realnames
this.realname = this.realname.replace(/[\r\n]/g, "_").substring(0, 128);
} }
if (!this.port) { if (!this.port) {