[tor-bugs] #34175 [Internal Services/Service - trac]: spam attack on trac

[Tor Bug Tracker & Wiki]

#34175: spam attack on trac
----------------------------------------------+------------------------
 Reporter:  anarcat                           |          Owner:  qbi
     Type:  defect                            |         Status:  closed
 Priority:  Immediate                         |      Milestone:
Component:  Internal Services/Service - trac  |        Version:
 Severity:  Major                             |     Resolution:  fixed
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+------------------------
Changes (by qbi):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 Replying to [comment:24 cypherpunk1]:
 > 4. Disallow non-alphanumeric !([a-zA-Z0-9]{1,255}) username. Related
 https://trac.torproject.org/projects/tor/ticket/23771

 I tried to use several regexes to disallow non-alphanumeric characters,
 but even simple ones like `[AB]`  didn't work as expected (only allowed A
 and B plus non-ASCII characters). Also `(?a)[AB]` and similar combinations
 didn't work. Currently it is unclear how to make this work. We'll
 investigate later and adjust the settings if there  is a good fix. For now
 I'll close this ticket.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34175#comment:33>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online