search

neurosnap / lists.sh

a microblog for lists
https://lists.sh
MIT License
227 stars 6 forks source link

Create denylist and better validation for usernames #5

Closed neurosnap closed 2 years ago

neurosnap commented 2 years ago

Currently we don't really limit what can be used as a username for this service.

I think this service might need a reserved username list. admin, abuse, cgi or even ops, help, spec ..or ?foo=42 are all available and possible right now.

https://news.ycombinator.com/item?id=31178436

I agree that we should create a denylist of usernames that aren't allowed as well as perform slightly better validation.