further sanitize nickname characters

diff --git a/IkiWiki/Plugin/openid.pm b/IkiWiki/Plugin/openid.pm
index d393afd2363be34a455d76f9b4442a54d00366ce..4727577f342587bc1e99fdc77c8afb1a42bdb91e 100644 (file)
--- a/IkiWiki/Plugin/openid.pm
+++ b/IkiWiki/Plugin/openid.pm
@@ -212,6 +212,7 @@ sub auth ($$) {
                        }
                        if (defined $nickname) {
                                $nickname=~s/\s+/_/g;
+                               $nickname=~s/[^-_0-9[:alnum:]]+//g;
                                $session->param(nickname => $nickname);
                        }
                }