From f9f4115b7baeb9a73b63ecda3397994961071373 Mon Sep 17 00:00:00 2001
From: Vitaly Takmazov
Date: Tue, 8 May 2018 21:46:36 +0300
Subject: common: strip login urls from input

---
 juick-common/src/main/java/com/juick/server/CommandsManager.java | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'juick-common/src/main/java/com/juick/server')

diff --git a/juick-common/src/main/java/com/juick/server/CommandsManager.java b/juick-common/src/main/java/com/juick/server/CommandsManager.java
index 82d293fe..ab55bba7 100644
--- a/juick-common/src/main/java/com/juick/server/CommandsManager.java
+++ b/juick-common/src/main/java/com/juick/server/CommandsManager.java
@@ -29,9 +29,9 @@ import com.juick.server.helpers.CommandResult;
 import com.juick.server.helpers.TagStats;
 import com.juick.server.helpers.annotation.UserCommand;
 import com.juick.server.util.HttpUtils;
-import com.juick.server.util.ImageUtils;
 import com.juick.server.util.TagUtils;
 import com.juick.service.*;
+import com.juick.util.MessageUtils;
 import org.apache.commons.collections4.CollectionUtils;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.commons.lang3.math.NumberUtils;
@@ -79,7 +79,8 @@ public class CommandsManager {
     private ImagesService imagesService;
 
     public CommandResult processCommand(User user, String data, @Nonnull URI attachment) throws Exception {
-        String input = StringUtils.stripStart(data, null);
+        String strippedData = StringUtils.stripStart(data, null);
+        String input = MessageUtils.stripNonSafeUrls(strippedData);
         Optional<Method> cmd = MethodUtils.getMethodsListWithAnnotation(getClass(), UserCommand.class).stream()
                 .filter(m -> Pattern.compile(m.getAnnotation(UserCommand.class).pattern(),
                         m.getAnnotation(UserCommand.class).patternFlags()).matcher(input).matches())
-- 
cgit v1.2.3