rob05c / gomud

A telnet game server written in Go
MIT License
0 stars 1 forks source link

Sanitize player input #8

Open rob05c opened 11 years ago

rob05c commented 11 years ago

Special characters should be disallowed. Character names should only allow alphabetic characters.

Any other input, such as communication, should remove special characters, such as backspaces and bell characters.

Sanitized input must still be sufficient for admin script commands.

character names now only allow alphabetic characters

Note because of NPC scripting, input, at least from users who can create (admins?), must allow all characters necessary for writing javascript.