MrDiderot/Michess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

check pattern in backend as well

Browse Source
This commit is contained in:
Nathaniel Tampus
2023-03-06 18:57:57 +08:00
parent 6d19501ad4
commit caa12fd5ce
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
server/src/controllers/auth.controller.ts
View File

@@ -19,6 +19,13 @@ export const guestSession = async (req: Request, res: Response) => {
try { try {
const name = xss(req.body.name); const name = xss(req.body.name);
const pattern = /^[A-Za-z0-9_]+$/;
if (!pattern.test(name)) {
res.status(400).end();
return;
}
if (!req.session.user || !req.session.user?.id) { if (!req.session.user || !req.session.user?.id) {
// create guest session // create guest session
const user: User = { const user: User = {