Mirrors/wg-portal
1
0
Fork 0
mirror of https://github.com/h44z/wg-portal.git synced 2026-09-04 05:47:08 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
586 Commits 46 Branches 59 Tags
startup_timeout_config
Commit Graph
2 Commits
Author SHA1 Message Date
Jacopo ClarkandGitHub a0cb7d9d39 fix(domain): make SanitizeString idempotent (#745)
Docker / Build and Push (push) Canceled after 0s
Details
github-pages / deploy (push) Canceled after 0s
Details
Test / make test (push) Canceled after 0s
Details
Docker / release (push) Canceled after 0s
Details 
NFC normalisation ran before control and format characters were stripped.
Removing a character can leave a base letter next to a combining mark the
earlier pass never saw as a pair, so a second call composes it:

    input    U+0041 U+0009 U+0300   ("A", tab, combining grave)
    once  -> U+0041 U+0300
    twice -> U+00C0

Found by TestPropertySanitizeStringIdempotent. Category Cf characters
behave the same way.

Strip first, then normalise. Normalisation still precedes truncation
because composing changes the rune count. One side effect: invalid UTF-8
is now dropped by the strip loop instead of surviving as U+FFFD, so an
identifier containing such bytes sanitises differently than before.

Signed-off-by: clark-ja <37738506+clark-ja@users.noreply.github.com>
 2026-09-01 22:30:37 +02:00
Mykhailo RoitGitHubChristoph Haas
 		958dcb8fa9 feat: sanitize external identity provider user data (#681) 
* feat: sanitize external user data

* remove config option to disable Sanitization: sanitize_external_user_data

* cleanup

---------

Co-authored-by: Christoph Haas <christoph.h@sprinternet.at>
 2026-05-18 22:28:27 +02:00