name-color: shore up one of the last vulns

2024-07-11 02:25:30 -04:00 · 2024-07-11 02:25:30 -04:00 · 8a5ff92104
commit 8a5ff92104
parent f7da042736
1 changed files with 1 additions and 1 deletions
--- a/serverside/name-color.ts
+++ b/serverside/name-color.ts
@ -45,7 +45,7 @@ async function get_name_color(name: string): Promise<string | undefined> {
        if (text.startsWith("name-color: ")) {
            const color = text.split("name-color: ")[1]
                .slice(0, MAX_COLOR_LEN)
-                .replaceAll(";", "");
+                .replaceAll(/[;{}"']/g, "");
            if (is_valid_color(color)) {
                return color;
            } else {