Reject negative manual ban durations
This commit is contained in:
committed by
Brandon McGinty
parent
0e9e495a8f
commit
51d62c3acb
@@ -266,7 +266,7 @@ Priority 3: configuration, UI, and binding hardening
|
||||
Both helpers panic on exec failure. Return/log an error or remove unused
|
||||
helpers; a missing optional beep binary must not terminate Barnard.
|
||||
|
||||
35. Admin manual-ban duration accepts negative values
|
||||
[x] 35. Admin manual-ban duration accepts negative values
|
||||
Files: admin.go, gumble/gumble/bans.go
|
||||
Negative minutes become a negative duration, then are cast to uint32
|
||||
seconds for the protocol, creating a huge ban duration. Reject negative
|
||||
|
||||
Reference in New Issue
Block a user