Correctly escape username pattern regex

Without the escaping, the backslash doesn't get renderet in the frontend which leads to some browsers (chrome >= 114?) just allowing every input.
2026-01-10 07:38:10 -05:00 · 2023-06-05 23:35:31 +02:00
parent 5425f5cfa6
commit bb7e5a369d
2 changed files with 2 additions and 2 deletions
--- a/app/views/registrations/_form.haml
+++ b/app/views/registrations/_form.haml
@@ -32,7 +32,7 @@
                   placeholder: t("registrations.new.username"),
                   title:       t("registrations.new.enter_username"),
                   required:    true,
-                   pattern:     "[A-Za-z0-9_.\-]+",
+                   pattern:     "[A-Za-z0-9_.\\-]+",
                   aria:        {labelledby: "usernameLabel"}

    - if mobile
--- a/app/views/sessions/_form.haml
+++ b/app/views/sessions/_form.haml
@@ -19,7 +19,7 @@
                   placeholder: t("registrations.new.username"),
                   class: "input-block-level form-control",
                   required: true,
-                   pattern: "[A-Za-z0-9_.@\-]+",
+                   pattern: "[A-Za-z0-9_.@\\-]+",
                   autocapitalize: "none",
                   autocorrect: "off",
                   autofocus: true,