We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent cafe1a5 commit 5c911ddCopy full SHA for 5c911dd
bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
@@ -245,6 +245,8 @@ class ApiController {
245
// Do we have a name for the user joining? If none, complain.
246
if (!StringUtils.isEmpty(params.fullName)) {
247
params.fullName = StringUtils.strip(params.fullName);
248
+ // remove control characters ( sanitize )
249
+ params.fullName = params.fullName.replaceAll("\\p{Cntrl}", "");
250
if (StringUtils.isEmpty(params.fullName)) {
251
errors.missingParamError("fullName");
252
}
0 commit comments