Do not allow terribly stupid hex format by default without permission

Brikster · Sep 21, 2024 · cd1e56c · cd1e56c
1 parent be336c6
commit cd1e56c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/...ava/ru/brikster/chatty/chat/message/transform/decorations/PlayerDecorationsFormatter.java b/...ava/ru/brikster/chatty/chat/message/transform/decorations/PlayerDecorationsFormatter.java
@@ -78,8 +78,11 @@ public final class PlayerDecorationsFormatter {
             }
         }
 
+        String messageToDeserialize = message;
+
         if (!sender.hasPermission("chatty.decoration.hex")) {
             componentSerializerBuilder.hexCharacter((char) 0);
+            messageToDeserialize = message.replaceAll("&[xX](&[a-fA-F0-9]){6}", "");
         } else {
             componentSerializerBuilder.hexColors();
         }
@@ -88,7 +91,7 @@ public final class PlayerDecorationsFormatter {
 
         return componentSerializerBuilder
                 .build()
-                .deserialize(message);
+                .deserialize(messageToDeserialize);
     }
 
 }