solidcommunity.net icon indicating copy to clipboard operation
solidcommunity.net copied to clipboard

Registration allows invalid name (distinct from user name) / it is not escaped when rendered

Open AJamesPhillips opened this issue 4 years ago • 0 comments

Distinct from #53. solidcommunity.net allows for the new user's name (not their user name) to contain characters such as: ajp (test) user NAME !@£$%^&*()_+`~-={}|[]\:";'<>?,./

These do not appear to be escaped and rendered successfully when viewing their card: https://ajptestuser2.solidcommunity.net/profile/card#me

Giving the error:

Outline.expand: Unable to fetch https://ajptestuser2.solidcommunity.net/profile/card: Failed to load https://ajptestuser2.solidcommunity.net/profile/card Fetcher: Error trying to parse https://ajptestuser2.solidcommunity.net/profile/card as Notation3: SyntaxError: Line 16 of https://ajptestuser2.solidcommunity.net/profile/card: Bad syntax: bad escape at: ":";'<>?,./" ;" status: 200

(Perhaps this should live on https://github.com/solid/node-solid-server ?)

AJamesPhillips avatar Aug 24 '21 12:08 AJamesPhillips