From 9776374d17822d5a4bb43e833a1830310cbbfecc Mon Sep 17 00:00:00 2001 From: Kitaiti Makoto Date: Thu, 5 Jan 2023 02:46:07 +0900 Subject: [PATCH] Rejectd illegal characters from blog name --- src/routes/blogs.rs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/routes/blogs.rs b/src/routes/blogs.rs index 295d08a8..40150ca3 100644 --- a/src/routes/blogs.rs +++ b/src/routes/blogs.rs @@ -82,6 +82,8 @@ fn valid_slug(title: &str) -> Result<(), ValidationError> { let slug = Blog::slug(title); if slug.is_empty() { Err(ValidationError::new("empty_slug")) + } else if slug.contains(&['<', '>', '&', '@', '\'', '"', ' ', '\n', '\t'][..]) { + Err(ValidationError::new("slug_illegal_char")) } else { Ok(()) }