Made custom worker names safe for JSON data
And comma-separated lists too.
This commit is contained in:
@@ -197,8 +197,8 @@ static bool get_custom_user(const char* s, char (&user)[N])
|
|||||||
if ((c == '+') || (c == '.')) {
|
if ((c == '+') || (c == '.')) {
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
// Limit to printable ASCII characters
|
// Limit to printable ASCII characters, also skip comma and JSON special characters
|
||||||
if (c >= ' ' && c <= '~') {
|
if (c >= ' ' && c <= '~' && c != ',' && c != '"' && c != '\\') {
|
||||||
user[len++] = c;
|
user[len++] = c;
|
||||||
}
|
}
|
||||||
++s;
|
++s;
|
||||||
|
|||||||
Reference in New Issue
Block a user