do length checks in badge_grant

2023-01-01 02:38:41 +02:00 · 2023-01-01 02:38:41 +02:00 · 9f73e7bb34
parent 6933adb185
commit 9f73e7bb34
1 changed files with 6 additions and 0 deletions
--- a/files/helpers/useractions.py
+++ b/files/helpers/useractions.py
@ -8,6 +8,12 @@ def badge_grant(user, badge_id, description=None, url=None, notify=True):
 	if user.has_badge(badge_id):
 		return

+	if len(description) > 256:
+		abort(400, "Custom description is too long, max 256 characters!")
+
+	if len(url) > 256:
+		abort(400, "URL is too long, max 256 characters!")
+
 	badge = Badge(
 		badge_id=int(badge_id),
 		user_id=user.id,