From fd39525adaa4f930e4a17531550189c0f78d18c3 Mon Sep 17 00:00:00 2001 From: Nicolas F Date: Sat, 23 Feb 2019 12:49:21 +0100 Subject: [PATCH] account: force ASCII usernames on login form Our database doesn't like it when we check for unicode data in a column that stores ASCII data, so let's stop it before it gets that far. --- nyaa/views/account.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/nyaa/views/account.py b/nyaa/views/account.py index f4fe6a0..6534779 100644 --- a/nyaa/views/account.py +++ b/nyaa/views/account.py @@ -26,6 +26,9 @@ def login(): return flask.redirect(flask.url_for('account.login')) username = form.username.data.strip() + if not username.isascii(): + flask.flash('Invalid characters in username.', 'danger') + return flask.redirect(flask.url_for('account.login')) password = form.password.data user = models.User.by_username(username)