You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
What are the limits anyway?
EDIT: I assume it's for editing the those values, as the server already checks the sizes on signup at least.
EDIT2: @mayeaux Let me guess, the name length didn't get validated, despite the check being in the code, right? If so, the fix is pretty simple, you had to pass the options object with min and max to the len() method instead of just numbers.
It's not a full solution, but will enable validation on signup at least.
Someone was doing an exploit with a really long channelName on the user model.
Those values should be sanitized and limited in size for security reasons
The text was updated successfully, but these errors were encountered: