fix(security): Only allow printable characters in incoming messages.

TokTok · Nov 24, 2024 · 70890de · 70890de
1 parent bb1324e
commit 70890de
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/core/toxstring.cpp b/src/core/toxstring.cpp
@@ -69,7 +69,10 @@ size_t ToxString::size() const
  */
 QString ToxString::getQString() const
 {
-    return QString::fromUtf8(string);
+    const QString tainted = QString::fromUtf8(string);
+    QString cleaned;
+    std::copy_if(tainted.begin(), tainted.end(), std::back_inserter(cleaned), [](QChar c) { return c.isPrint(); });
+    return cleaned;
 }
 
 /**