Sfoglia il codice sorgente

Update AP helpers, improve preferredUsername validation

Daniel Supernault 1 anno fa
parent
commit
21218c794b
1 ha cambiato i file con 7 aggiunte e 0 eliminazioni
  1. 7 0
      app/Util/ActivityPub/Helpers.php

+ 7 - 0
app/Util/ActivityPub/Helpers.php

@@ -760,6 +760,13 @@ class Helpers {
         if(!isset($res['preferredUsername']) && !isset($res['nickname'])) {
             return;
         }
+        // skip invalid usernames
+        if(!ctype_alnum($res['preferredUsername'])) {
+            $tmpUsername = str_replace(['_', '.', '-'], '', $res['preferredUsername']);
+            if(!ctype_alnum($tmpUsername)) {
+                return;
+            }
+        }
         $username = (string) Purify::clean($res['preferredUsername'] ?? $res['nickname']);
         if(empty($username)) {
             return;