AsmBB

Power
Login Register

John, did you fix the username max length?
0

#16313 (ツ) janemax
Last edited: 15.03.2023 by janemax, read: 687 times

Currently the user can register usernames without any length restriction.

Is that fixed? Couldn't find a relevant commit for that.

Thanks.

#16316 (ツ) johnfound
Created 15.03.2023, read: 680 times
janemax

Currently the user can register usernames without any length restriction.

Is that fixed? Couldn't find a relevant commit for that.

Thanks.

Well, actually there is a limit for the usernames length - 256 bytes. I will not change this number, because IMO the engine should process such usernames in safe way. Decreasing the username length will mask the vulnerabilities instead of fixing them. In price of limiting the UX of the honest users.

John, did you fix the username max length?
0

AsmBB v3.0 (check-in: a316dab8b98d07d9); SQLite v3.42.0 (check-in: 831d0fb2836b71c9);
©2016..2023 John Found; Licensed under EUPL. Powered by Assembly language Created with Fresh IDE