From ac3ac9dfbe61fff4b3868aad82869b97211b1c90 Mon Sep 17 00:00:00 2001 From: anupamme Date: Thu, 17 Sep 2026 12:34:24 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by OrbisAI Security --- application/net/wiki/Toolforge.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/application/net/wiki/Toolforge.js b/application/net/wiki/Toolforge.js index 54ca5790..d58d57b8 100644 --- a/application/net/wiki/Toolforge.js +++ b/application/net/wiki/Toolforge.js @@ -336,7 +336,7 @@ function module_code(library_namespace) { }; } - if (dbname.includes('`')) + if (!/^[A-Za-z0-9_$]+$/.test(dbname)) throw new Error('Invalid database name: [' + dbname + ']'); run_SQL('CREATE DATABASE IF NOT EXISTS `' + dbname + '`', function(