diff --git a/lib/channel/chat.js b/lib/channel/chat.js index 606d83b7..ce674612 100644 --- a/lib/channel/chat.js +++ b/lib/channel/chat.js @@ -116,7 +116,13 @@ ChatModule.prototype.handleChatMsg = function (user, data) { return; } - data.msg = data.msg.substring(0, 240); + // Limit to 240 characters, disallow all ASCII control characters except tab (\t) + data.msg = data.msg.substring(0, 240).replace(/[\x00-\x08\x0a-\x1f]+/g, " "); + + // Disallow blankposting + if (!data.msg) { + return; + } if (!user.is(Flags.U_LOGGED_IN)) { return;