Check petname

merge-requests/30/head
Bob Mottram 2020-06-29 19:31:57 +01:00
parent 0d43652008
commit 25a24557f8
1 changed files with 5 additions and 0 deletions

View File

@ -7599,6 +7599,11 @@ class PubServer(BaseHTTPRequestHandler):
petname = optionsConfirmParams.split('optionpetname=')[1]
if '&' in petname:
petname = petname.split('&')[0]
# Limit the length of the petname
if len(petname) > 20 or \
' ' in petname or '/' in petname or \
'?' in petname or '#' in petname:
petname = None
optionsNickname = getNicknameFromActor(optionsActor)
if not optionsNickname: