From f7852d02bad388069240839bd3311f2c859571f8 Mon Sep 17 00:00:00 2001 From: Paul Frazee Date: Fri, 11 Oct 2024 14:41:12 -0700 Subject: [PATCH] Protect against zero-width chars in display name sanitation (see https://github.com/bluesky-social/social-app/pull/5703#issuecomment-2407459187) (#5729) --- src/lib/strings/display-names.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/strings/display-names.ts b/src/lib/strings/display-names.ts index 23f3255129..a95bfd6798 100644 --- a/src/lib/strings/display-names.ts +++ b/src/lib/strings/display-names.ts @@ -7,7 +7,7 @@ import {ModerationUI} from '@atproto/api' const CHECK_MARKS_RE = /[\u2705\u2713\u2714\u2611]/gu const CONTROL_CHARS_RE = /[\u0000-\u001F\u007F-\u009F\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]/g -const MULTIPLE_SPACES_RE = /[\s][\s]+/g +const MULTIPLE_SPACES_RE = /[\s][\s\u200B]+/g export function sanitizeDisplayName( str: string,