From dd110be8c702c83915b8aab41b3ae1b731558605 Mon Sep 17 00:00:00 2001
From: hole-thu <hole_thu@riseup.net>
Date: Tue, 30 Aug 2022 23:36:44 +0800
Subject: [PATCH] feat: filter invisible chars in title

---
 src/api/operation.rs | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/api/operation.rs b/src/api/operation.rs
index 2cd26f3..1160080 100644
--- a/src/api/operation.rs
+++ b/src/api/operation.rs
@@ -208,7 +208,12 @@ pub struct TitleInput {
 
 #[post("/title", data = "<ti>")]
 pub async fn set_title(ti: Form<TitleInput>, user: CurrentUser, rconn: RdsConn) -> JsonApi {
-    if CustomTitle::set(&rconn, &user.namehash, &ti.title).await? {
+    let title: String = ti.title.chars().filter(|c| c.is_alphanumeric()).collect();
+    if title.is_empty() {
+        Err(TitleUsed)?
+    }
+
+    if CustomTitle::set(&rconn, &user.namehash, &title).await? {
         code0!()
     } else {
         Err(TitleUsed)?