CIRCL
/
lookyloo
mirror of https://github.com/CIRCL/lookyloo
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: Enforce username with only chars

pull/940/head
Raphaël Vinot 2024-09-25 16:37:53 +02:00
parent 8f2361427c
commit 36837a8edc
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lookyloo/helpers.py
View File

@ -20,6 +20,7 @@ from logging import Logger
from pathlib import Path from pathlib import Path
from pydantic import field_validator from pydantic import field_validator
from pydantic_core import from_json from pydantic_core import from_json
from string import punctuation
from typing import Any, TYPE_CHECKING from typing import Any, TYPE_CHECKING
from urllib.parse import urlparse from urllib.parse import urlparse
@ -436,6 +437,9 @@ class CaptureSettings(LacuscoreCaptureSettings):
@lru_cache(64) @lru_cache(64)
def load_user_config(username: str) -> dict[str, Any] | None: def load_user_config(username: str) -> dict[str, Any] | None:
if any(c in punctuation for c in username):
# The username is invalid. This should never happen, but let's be safe.
return None
user_config_path = get_homedir() / 'config' / 'users' / f'{username}.json' user_config_path = get_homedir() / 'config' / 'users' / f'{username}.json'
if not user_config_path.exists(): if not user_config_path.exists():
return None return None