From 97391c51d8f1c8b8a00e6190d1bafd245e762d8f Mon Sep 17 00:00:00 2001 From: sam Date: Sat, 28 Oct 2023 00:58:20 +0200 Subject: [PATCH] fix: disallow * in member names, it breaks routing --- backend/db/member.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/backend/db/member.go b/backend/db/member.go index f301c89..6eb444c 100644 --- a/backend/db/member.go +++ b/backend/db/member.go @@ -41,12 +41,14 @@ const ( ) // member names must match this regex -var memberNameRegex = regexp.MustCompile("^[^@\\?!#/\\\\[\\]\"\\{\\}'$%&()+<=>^|~`,]{1,100}$") +var memberNameRegex = regexp.MustCompile("^[^@\\?!#/\\\\[\\]\"\\{\\}'$%&()+<=>^|~`,\\*]{1,100}$") // List of member names that cannot be used because they would break routing or be inaccessible due to page conflicts. var invalidMemberNames = []string{ + // these break routing outright ".", "..", + // the user edit page lives at `/@{username}/edit`, so a member named "edit" would be inaccessible "edit", }