From 9c35a55969ec186c34c1ff3839d1215e18873d85 Mon Sep 17 00:00:00 2001 From: zzz <zzz@mail.i2p> Date: Mon, 11 Jun 2018 12:06:34 +0000 Subject: [PATCH] enforce max family name length --- .../src/net/i2p/router/web/helpers/ConfigFamilyHandler.java | 3 +++ 1 file changed, 3 insertions(+) diff --git a/apps/routerconsole/java/src/net/i2p/router/web/helpers/ConfigFamilyHandler.java b/apps/routerconsole/java/src/net/i2p/router/web/helpers/ConfigFamilyHandler.java index 755aedb64c..fd344547b5 100644 --- a/apps/routerconsole/java/src/net/i2p/router/web/helpers/ConfigFamilyHandler.java +++ b/apps/routerconsole/java/src/net/i2p/router/web/helpers/ConfigFamilyHandler.java @@ -34,6 +34,9 @@ public class ConfigFamilyHandler extends FormHandler { addFormError("Family already configured: " + family); } else if (family.contains("/") || family.contains("\\")) { addFormError("Bad characters in Family: " + family); + } else if (family.length() > 32) { + // let's enforce some sanity + addFormError("Family too long, 32 chars max: " + family); } else if (_context.router().saveConfig(FamilyKeyCrypto.PROP_FAMILY_NAME, family.trim())) { addFormNotice(_t("Configuration saved successfully.")); addFormError(_t("Restart required to take effect")); -- GitLab