diff --git a/files/routes/asset_submissions.py b/files/routes/asset_submissions.py index fbde2171c..087d77395 100644 --- a/files/routes/asset_submissions.py +++ b/files/routes/asset_submissions.py @@ -37,6 +37,8 @@ def submit_emojis(v): return render_template("submit_emojis.html", v=v, emojis=emojis) +emoji_modifiers = ('pat', 'talking', 'genocide', 'heart') + @app.post("/submit/emojis") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @@ -50,6 +52,10 @@ def submit_emoji(v): username = request.values.get('author', '').lower().strip() kind = request.values.get('kind', '').strip() + for modifier in emoji_modifiers: + if name.endswith(modifier): + abort(400, f'Submitted emoji names should NOT end with the word "{modifier}"') + if kind not in EMOJI_KINDS: abort(400, "Invalid emoji kind!")