fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Guard the namespace on NickServ GROUP, gRPC GroupNick, and GroupServ REGISTER (confusable/forbid/cap)
Some checks failed
CI / check (push) Has been cancelled
Details

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-19 15:34:35 +00:00
parent 224bc78641
commit 03d39c1329
No known key found for this signature in database
3 changed files with 34 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/groupserv/src/register.rs
View file

@ -11,6 +11,14 @@ pub fn handle(me: &str, from: &Sender, name: Option<&str>, ctx: &mut ServiceCtx,
ctx.notice(me, from.uid, "A group name starts with \x02!\x02, e.g. \x02!staff\x02.");
return;
}
// Guard the group namespace like NickServ/ChanServ REGISTER: a look-alike group
// name (!аdmin) could impersonate a real one that opers grant channel access to.
if db.confusable_check_enabled() {
if let Some(reason) = echo_api::confusable_reason(name) {
ctx.notice(me, from.uid, reason);
return;
}
}
let acc = acc.to_string();
match db.group_register(name, &acc) {
Ok(()) => ctx.notice(me, from.uid, format!("Group \x02{name}\x02 registered — you're the founder.")),