feat: limit user names allowed (#3908)

bloom-housing · Feb 28, 2024 · c5bc517 · c5bc517
1 parent 8fea8b4
commit c5bc517
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/api/src/services/user.service.ts b/api/src/services/user.service.ts
@@ -479,6 +479,15 @@ export class UserService {
     requestingUser: User,
     jurisdictionName?: string,
   ): Promise<User> {
+    if (
+      this.containsInvalidCharacters(dto.firstName) ||
+      this.containsInvalidCharacters(dto.lastName)
+    ) {
+      throw new ForbiddenException(
+        `${dto.firstName} ${dto.lastName} was found to be invalid`,
+      );
+    }
+
     if (forPartners) {
       await this.authorizeAction(
         requestingUser,
@@ -849,4 +858,8 @@ export class UserService {
       return misMatched;
     }, []);
   }
+
+  containsInvalidCharacters(value: string): boolean {
+    return value.includes('.') || value.includes('http');
+  }
 }