search

qbreader / website

A text-based quizbowl packet reader with support for both single- and multi-player.
https://www.qbreader.org
MIT License
39 stars 18 forks source link

Limit usernames/room names/user input to specific set of characters #274

Open alopezlago opened 3 months ago

alopezlago commented 3 months ago

There are lots of Unicode characters that create strange rendering behaviors which are useful for trolls. The basic 8-bit ASCII range should be enough for most user input (usernames, room names, etc.). For answers you could allow some extended characters for answers, but that shouldn't be necessary. This filtering should be done at least on the server-side.

I haven't checked the code everywhere, but you should consider limiting the length of all user inputs, not just usernames or chat messages.

VillainsRule commented 3 months ago

Are there already character limits?