Disallow ASCII control characters in messages

This commit is contained in:
calzoneman 2014-08-29 15:47:56 -05:00
parent 2a8b94e26a
commit 484b695965

View file

@ -116,7 +116,13 @@ ChatModule.prototype.handleChatMsg = function (user, data) {
return; return;
} }
data.msg = data.msg.substring(0, 240); // Limit to 240 characters, disallow all ASCII control characters except tab (\t)
data.msg = data.msg.substring(0, 240).replace(/[\x00-\x08\x0a-\x1f]+/g, " ");
// Disallow blankposting
if (!data.msg) {
return;
}
if (!user.is(Flags.U_LOGGED_IN)) { if (!user.is(Flags.U_LOGGED_IN)) {
return; return;