Opened 8 years ago

Last modified 5 years ago

#3765 closed defect

Banning doesn't work with weird nicknames — at Initial Version

Reported by: elexis Owned by:
Priority: Nice to Have Milestone:
Component: Network Keywords:
Cc: Patch:

Description

Users can mess with their nickname to prevent the host from kicking/banning them. The first letter of the nickname must be a character that the host can't type (hence autocomplete won't work).

The lobby already has some rules in place, testing for allowed characters. But when joining via IP, the nicknames can have leading whitespace and completely arbitrary characters (including combining operators which only modify the following character, messing up even the strings that show the names).

Thanks Hannibal Barca for investigating.

While the username could be sanitized when joining the match, it would prevent for example chinese users to play with chinese names. Better solve this issue by allowing to ban users by clicking on them in a new window. Internally, the GUID should be passed to the engine.

Change History (0)

Note: See TracTickets for help on using tickets.