Limit username length (OpenUserJS#1769)

* This prevents some flooding * Can tweak this a little bit but we'll see * Checked with `db.users.find({$where:'this.name.length > 65'}).pretty();` Auto-merge
Martii · Oct 17, 2020 · 2a830dd · 2a830dd
1 parent 132efb6
commit 2a830dd
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/controllers/auth.js b/controllers/auth.js
@@ -150,6 +150,11 @@ exports.auth = function (aReq, aRes, aNext) {
     return;
   }
 
+  if (username.length > 64) {
+    aRes.redirect('/login?toolong');
+    return;
+  }
+
   // Store the username in the session so we still have it when they
   // get back from authentication
   if (!aReq.session.username) {