Add maximum line lengths.

diff --git a/config.py.example b/config.py.example
index f42409a334dfc02ccae17d4edc8a8540fd788cd2..05f0e252fd76f1448608bd8a843c600e54e50f0b 100644 (file)
--- a/config.py.example
+++ b/config.py.example
@@ -5,3 +5,4 @@ UPDATE_FREQ = 0.5
 MAXBUFLEN = 10000
 MAXSUBSCRIPTIONS = 3
 REALNAME = "http://moo.com/"
+MAXLINELEN = 600

diff --git a/qwebirc/ajaxengine.py b/qwebirc/ajaxengine.py
index 84b4a0982137cf6973f3f409ee2c517a71b1fb6f..ff6bd8ef9718946002e66d949e02a4e2da61cbae 100644 (file)
--- a/qwebirc/ajaxengine.py
+++ b/qwebirc/ajaxengine.py
@@ -181,6 +181,10 @@ class AJAXEngine(resource.Resource):
       except UnicodeDecodeError:
         decoded = command.decode("iso-8859-1", "ignore")
 
+      if len(decoded) > config.MAXLINELEN:
+        session.disconnect()
+        return [False, "Line too long"]
+
       try:
         session.push(decoded)
       except AttributeError: # occurs when we haven't noticed an error