fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Guard the namespace on NickServ GROUP, gRPC GroupNick, and GroupServ REGISTER (confusable/forbid/cap)
Some checks failed
CI / check (push) Has been cancelled
Details

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-19 15:34:35 +00:00
parent 224bc78641
commit 03d39c1329
No known key found for this signature in database
3 changed files with 34 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/engine/register.rs
View file

@ -148,6 +148,14 @@ impl Engine {
if self.db.account(nick).is_some() {
return AuthorityStatus::Invalid; // nick is itself a registered account
}
// Same namespace guards as REGISTER: grouping reserves the nick, so a website
// can't group a look-alike/forbidden nick, and one account can't squat many.
if let Err(status) = self.authority_name_ok(nick) {
return status;
}
if self.db.grouped_nicks(account).len() >= 25 {
return AuthorityStatus::Invalid;
}
match self.db.group_nick(nick, account) {
Ok(()) => AuthorityStatus::Ok,
Err(_) => AuthorityStatus::NotFound, // group_nick's only Err means the account doesn't exist