Current import procedure allows harmful characters into author name fields

openlibhums / imports

A plugin for importing content into Janeway.

GNU Affero General Public License v3.0

1 stars 2 forks source link

Current import procedure allows harmful characters into author name fields #101

Open ajrbyers opened 1 month ago

ajrbyers commented 1 month ago

An FrozenAuthor's last name imported into Zygon contained the character \n. Both \n and \r are not allowed in file headers and will break file serving.

An error is available in sentry: https://open-library-of-humanities.sentry.io/issues/5940065072/?project=160048&referrer=slack

A mitigation PR is in Janeway: https://github.com/openlibhums/janeway/pull/4441