updating from dev

2026-05-04 04:24:18 +02:00
parent 46afca976d
commit 2f1e42343b
76 changed files with 5554 additions and 2527 deletions
--- a/src/inc/routes/chat.mjs
+++ b/src/inc/routes/chat.mjs
@@ -84,6 +84,10 @@ export default (router, tpl) => {
        if (!req.session) {
            return res.reply({ code: 401, body: JSON.stringify({ success: false, msg: 'Login required' }) });
        }
+        // F-007 Security: Block banned users from chatting
+        if (req.session.banned) {
+            return res.reply({ code: 403, body: JSON.stringify({ success: false, msg: 'You are banned' }) });
+        }

        const message = (req.post?.message || '').trim();
        if (!message || message.length > MAX_MSG_LEN) {