fix: limit the characters for name on user (#667)

housingbayarea · Feb 28, 2024 · ea90147 · ea90147
1 parent ce9752b
commit ea90147
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/backend/core/src/auth/services/user.service.ts b/backend/core/src/auth/services/user.service.ts
@@ -384,7 +384,17 @@ export class UserService {
     return await this.userRepository.save(newUser)
   }
 
+  containsInvalidCharacters(value: string): boolean {
+    return value.includes(".") || value.includes("http")
+  }
+
   public async createPublicUser(dto: UserCreateDto, sendWelcomeEmail = false) {
+    if (
+      this.containsInvalidCharacters(dto.firstName) ||
+      this.containsInvalidCharacters(dto.lastName)
+    ) {
+      throw new HttpException("Forbidden", HttpStatus.FORBIDDEN)
+    }
     const newUser = await this._createUser({
       ...dto,
       passwordHash: await this.passwordService.passwordToHash(dto.password),