acetheking987/bsky-social-app
1
0
Fork 0
Code Issues Actions Packages Projects Releases 1 Wiki Activity

Sanitize multiple spaces in display names to protect against some security concerns (#5703)

Browse Source
This commit is contained in:
Paul Frazee
2024-10-10 22:14:50 -07:00
committed by GitHub
parent a8fb8dc6b2
commit 7677bb3f0a
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/lib/strings/display-names.ts
+6 -1
View File
@@ -7,6 +7,7 @@ import {ModerationUI} from '@atproto/api'
const CHECK_MARKS_RE = /[\u2705\u2713\u2714\u2611]/gu const CHECK_MARKS_RE = /[\u2705\u2713\u2714\u2611]/gu
const CONTROL_CHARS_RE = const CONTROL_CHARS_RE =
/[\u0000-\u001F\u007F-\u009F\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]/g /[\u0000-\u001F\u007F-\u009F\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]/g
const MULTIPLE_SPACES_RE = /[\s][\s]+/g
export function sanitizeDisplayName( export function sanitizeDisplayName(
str: string, str: string,
@@ -16,7 +17,11 @@ export function sanitizeDisplayName(
return '' return ''
} }
if (typeof str === 'string') { if (typeof str === 'string') {
return str.replace(CHECK_MARKS_RE, '').replace(CONTROL_CHARS_RE, '').trim() return str
.replace(CHECK_MARKS_RE, '')
.replace(CONTROL_CHARS_RE, '')
.replace(MULTIPLE_SPACES_RE, ' ')
.trim()
} }
return '' return ''
} }