fix: don't allow user display name to be over 32 chars

2025-05-20 23:30:40 -04:00 · 2025-05-20 23:30:40 -04:00 · fb2a9285d2
commit fb2a9285d2
parent 946f78a90b
4 changed files with 145 additions and 139 deletions
--- a/crates/app/src/routes/api/v1/auth/profile.rs
+++ b/crates/app/src/routes/api/v1/auth/profile.rs
@ -100,6 +100,11 @@ pub async fn update_user_settings_request(
        return Json(Error::NotAllowed.into());
    }

+    // check lengths
+    if req.display_name.len() > 32 {
+        return Json(Error::DataTooLong("display name".to_string()).into());
+    }
+
    // check percentage themes
    if !req.theme_sat.is_empty() && !req.theme_sat.ends_with("%") {
        req.theme_sat = format!("{}%", req.theme_sat)