chris/pixelfed
1
0
Fork 0
forked from mirror/pixelfed
Code Pull requests Activity

Update RegisterController

Browse source
This commit is contained in:
Daniel Supernault 2020-08-06 21:32:02 -06:00
parent 5c0dee018e
commit 3b7ff030f2
No known key found for this signature in database
GPG key ID: 0DEF1C662C9033F7
2 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Http/Controllers/Auth/RegisterController.php
View file

@ -68,6 +68,10 @@ class RegisterController extends Controller
$underscore = substr_count($value, '_');
$period = substr_count($value, '.');
if(ends_with($value, ['.php', '.js', '.css'])) {
return $fail('Username is invalid.');
}
if(($dash + $underscore + $period) > 1) {
return $fail('Username is invalid. Can only contain one dash (-), period (.) or underscore (_).');
}

5
app/Util/Lexer/RestrictedNames.php
View file

@ -85,6 +85,7 @@ class RestrictedNames
// Static Assets
'assets',
'public',
'storage',
// Laravel Horizon
@ -141,6 +142,8 @@ class RestrictedNames
'drives',
'driver',
'e',
'embed',
'embed.js',
'email',
'emails',
'error',
@ -182,6 +185,7 @@ class RestrictedNames
'invites',
'import',
'imports',
'index.php',
'j',
'js',
'k',
@ -280,6 +284,7 @@ class RestrictedNames
'whatsnew',
'whatnew',
'whats-news',
'web',
'ws',
'wss',
'www',