mbk/cohost
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

name-color: shore up one of the last vulns

Browse source
This commit is contained in:
mehbark 2024-07-11 02:25:30 -04:00
parent f7da042736
commit 8a5ff92104
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
serverside/name-color.ts
View file

@ -45,7 +45,7 @@ async function get_name_color(name: string): Promise<string | undefined> {
if (text.startsWith("name-color: ")) { if (text.startsWith("name-color: ")) {
const color = text.split("name-color: ")[1] const color = text.split("name-color: ")[1]
.slice(0, MAX_COLOR_LEN) .slice(0, MAX_COLOR_LEN)
.replaceAll(";", ""); .replaceAll(/[;{}"']/g, "");
if (is_valid_color(color)) { if (is_valid_color(color)) {
return color; return color;
} else { } else {