mirror of
https://github.com/esx-framework/esx_core.git
synced 2026-08-29 01:08:54 +00:00
Selt
d264553490
ESX.IsValidLocaleString only checks that the argument is a string, but a Lua string is a byte array and need not be valid utf8. utf8.codes raises on a malformed sequence rather than stopping, so the function throws where its annotation promises a boolean. esx_identity feeds raw client input into it through checkNameFormat, so a modified client sending a lone 0xFF byte as a first name aborts the registerIdentity callback before cb() runs. The client is left waiting on a promise that never resolves and cannot get past the identity screen, and it can be repeated at will. utf8.len returns nil instead of raising, so it is enough to reject the string up front. Verified on artifact 25770: "Jo\255hn" used to raise "invalid UTF-8 code" and now returns false. "John" still returns true, "Jo!hn" still returns false, and "Jo3hn" with allowDigits still returns true.