further sanitize nickname characters
authorJoey Hess <joey@kitenet.net>
Sun, 4 Jul 2010 20:12:50 +0000 (16:12 -0400)
committerJoey Hess <joey@kitenet.net>
Sun, 4 Jul 2010 20:12:50 +0000 (16:12 -0400)
IkiWiki/Plugin/openid.pm

index d393afd2363be34a455d76f9b4442a54d00366ce..4727577f342587bc1e99fdc77c8afb1a42bdb91e 100644 (file)
@@ -212,6 +212,7 @@ sub auth ($$) {
                        }
                        if (defined $nickname) {
                                $nickname=~s/\s+/_/g;
                        }
                        if (defined $nickname) {
                                $nickname=~s/\s+/_/g;
+                               $nickname=~s/[^-_0-9[:alnum:]]+//g;
                                $session->param(nickname => $nickname);
                        }
                }
                                $session->param(nickname => $nickname);
                        }
                }