bbs.profullstack/agentbbs
1
0
Fork 0
mirror of https://github.com/profullstack/agentbbs.git synced 2026-08-13 14:27:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

fix: add GameNames to IsReservedName checks (#42)

Browse source 
GameNames ("game", "games") are reserved SSH route usernames for
AgentGames but IsReservedName did not check GameNames, allowing
members to register accounts that collide with SSH routes.

Fixes #40

Co-authored-by: root <root@vultr.guest>
This commit is contained in:
threebeats 2026-06-22 08:23:50 -04:00 • committed by GitHub
parent 94846b91f3
commit a56f3afbca
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
internal/auth/auth.go
View file

@ -128,7 +128,7 @@ func IsReservedName(name string) bool {
n := strings.ToLower(name) n := strings.ToLower(name)
if GuestNames[n] || PodNames[n] || JoinNames[n] || DomainNames[n] || AdminNames[n] || if GuestNames[n] || PodNames[n] || JoinNames[n] || DomainNames[n] || AdminNames[n] ||
TorURLNames[n] || TorIRCNames[n] || TorNames[n] || IRCNames[n] || NewsNames[n] || TorURLNames[n] || TorIRCNames[n] || TorNames[n] || IRCNames[n] || NewsNames[n] ||
MsgNames[n] || systemReserved[n] { MsgNames[n] || GameNames[n] || systemReserved[n] {
return true return true
} }
return strings.HasPrefix(n, "video-") // video-<code> call routes return strings.HasPrefix(n, "video-") // video-<code> call routes