Sanitization improvements #2

New Issue

kami · 2025-02-02T16:10:39Z

kami commented

2025-02-02 16:10:39 +00:00

modules.utility.sanitize_user_input() need improvements before it can be relied on as a first-pass security filter.

Currently only performs basic whitelisting logic on given strings, removing potentially dangerous parts before returning the sanitized string.
This is too unreliable for production environments, especially if we implement database connectivity or need to perform dynamic calculations (eg. eval()) on user-generated content like chat commands.

**modules.utility.sanitize_user_input()** need improvements before it can be relied on as a first-pass security filter. Currently only performs basic whitelisting logic on given strings, removing potentially dangerous parts before returning the sanitized string. This is too unreliable for production environments, especially if we implement database connectivity or need to perform dynamic calculations (eg. _eval()_) on user-generated content like chat commands.

kami added the

enhancement

label 2025-02-02 16:10:39 +00:00

kami added this to the Devboard project 2025-02-09 23:17:15 +00:00

Sign in to join this conversation.