diff options
| author | Saturnino Abril <saturnino.abril@gmail.com> | 2017-04-26 23:11:32 +0900 |
|---|---|---|
| committer | Harrison Healey <harrisonmhealey@gmail.com> | 2017-04-26 10:11:32 -0400 |
| commit | 6fa7082833812c734aeef8ad24477823ee766f1b (patch) | |
| tree | bc70138ff3a71cfffcdf9fe20794735a87e478e7 /api4/context.go | |
| parent | f9502ff14bbb31aa835540c14725bbebdf0c340d (diff) | |
| download | chat-6fa7082833812c734aeef8ad24477823ee766f1b.tar.gz chat-6fa7082833812c734aeef8ad24477823ee766f1b.tar.bz2 chat-6fa7082833812c734aeef8ad24477823ee766f1b.zip | |
fix reaction's name validation with + sign in it (#6221)
Diffstat (limited to 'api4/context.go')
| -rw-r--r-- | api4/context.go | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/api4/context.go b/api4/context.go index c7fba4f5f..5522d1836 100644 --- a/api4/context.go +++ b/api4/context.go @@ -6,6 +6,7 @@ package api4 import ( "fmt" "net/http" + "regexp" "strings" "time" @@ -504,7 +505,9 @@ func (c *Context) RequireEmojiName() *Context { return c } - if len(c.Params.EmojiName) == 0 || len(c.Params.EmojiName) > 64 || !model.IsValidAlphaNumHyphenUnderscore(c.Params.EmojiName, false) { + validName := regexp.MustCompile(`^[a-zA-Z0-9\-\+_]+$`) + + if len(c.Params.EmojiName) == 0 || len(c.Params.EmojiName) > 64 || !validName.MatchString(c.Params.EmojiName) { c.SetInvalidUrlParam("emoji_name") } |