Reject guest names matching the reserved usernames regex

src/user.js

@@ -381,6 +381,19 @@ User.prototype.guestLogin = function (name) {
         return;
     }
 
+    if (name.match(Config.get("reserved-names.usernames"))) {
+        LOGGER.warn(
+            'Rejecting attempt by %s to use reserved username "%s"',
+            self.realip,
+            name
+        );
+        self.socket.emit("login", {
+            success: false,
+            error: "That username is reserved."
+        });
+        return;
+    }
+
     // Prevent duplicate logins
     self.setFlag(Flags.U_LOGGING_IN);
     db.users.isUsernameTaken(name, function (err, taken) {

src/web/auth.js

@@ -190,6 +190,11 @@ function handleRegister(req, res) {
     }
 
     if (name.match(Config.get("reserved-names.usernames"))) {
+        LOGGER.warn(
+            'Rejecting attempt by %s to register reserved username "%s"',
+            ip,
+            name
+        );
         sendPug(res, "register", {
             registerError: "That username is reserved"
         });