fix: remove forbidden characters from userId

5 years ago · 0b77cc7000
parent add4078c23
commit 0b77cc7000
1 changed files with 2 additions and 1 deletions
--- a/src/UsersTab.js
+++ b/src/UsersTab.js
@ -101,7 +101,8 @@ export default () => {
                .replace("@", "/")
                .normalize("NFKD")
                .replace(/[\u0300-\u036F]/g, "")
-                .toLowerCase();
+                .toLowerCase()
+                .replace(/[^a-z0-9=_-./]/g, "");
            post({
                admin: data.isSynapseAdministrator ? "admin" : false,
                email: data.emailAddress,