extracting only the 16 hex characters of the query string as paste ID, addressing #396

2019-01-20 12:20:37 +01:00
parent cc53d95ed1
commit 79a858f176
5 changed files with 7 additions and 5 deletions
--- a/js/privatebin.js
+++ b/js/privatebin.js
@@ -745,7 +745,7 @@ jQuery.PrivateBin = (function($, sjcl, Base64, RawDeflate) {
        {
            if (id === null) {
                // Attention: This also returns the delete token inside of the ID, if it is specified
-                id = window.location.search.substring(1);
+                id = (window.location.search.match(/[a-z0-9]{16}/) || [''])[0];

                if (id === '') {
                    throw 'no paste id given';