Bug Description
There is no check that a name change results in a non-empty string after .strip(). A user could set their name to whitespace characters only, resulting in an invisible username.
File & Lines
server code.py — lines 436–460
Severity
Policy/validation gap — allows invisible usernames.
Bug Description
There is no check that a name change results in a non-empty string after
.strip(). A user could set their name to whitespace characters only, resulting in an invisible username.File & Lines
server code.py— lines 436–460Severity
Policy/validation gap — allows invisible usernames.