X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/d3700e6201b4b78a70bbb2941572edc985b63c2c..64816e50b57ced52f5fb0082f97b2844e002cf11:/app/models/user.rb diff --git a/app/models/user.rb b/app/models/user.rb index aaa00169f..37351c6b2 100644 --- a/app/models/user.rb +++ b/app/models/user.rb @@ -88,16 +88,22 @@ class User < ActiveRecord::Base :default_url => "/assets/:class/:attachment/:style.png", :styles => { :large => "100x100>", :small => "50x50>" } + INVALID_ASCII_CHARS = "/;.,?%#".freeze + INVALID_NON_ASCII_CHARS = "\x00-\x08\x0b-\x0c\x0e-\x1f\x7f\ufffe\uffff".freeze + validates :display_name, :presence => true, :allow_nil => true, :length => 3..255, :exclusion => %w[new terms save confirm confirm-email go_public reset-password forgot-password suspended] validates :display_name, :if => proc { |u| u.display_name_changed? }, :uniqueness => { :case_sensitive => false } validates :display_name, :if => proc { |u| u.display_name_changed? }, - :format => { :with => %r{\A[^\x00-\x1f\x7f\ufffe\uffff/;.,?%#]*\z} } + :format => { :with => /\A[^#{INVALID_NON_ASCII_CHARS}]*\z/ } + validates :display_name, :if => proc { |u| u.display_name_changed? }, + :format => { :with => /\A[^#{INVALID_ASCII_CHARS}]*\z/, + :message => I18n.t("users.account.invalid chars", :invalid_chars => INVALID_ASCII_CHARS) } validates :display_name, :if => proc { |u| u.display_name_changed? }, - :format => { :with => /\A\S/, :message => "has leading whitespace" } + :format => { :with => /\A\S/, :message => I18n.t("users.account.leading whitespace") } validates :display_name, :if => proc { |u| u.display_name_changed? }, - :format => { :with => /\S\z/, :message => "has trailing whitespace" } + :format => { :with => /\S\z/, :message => I18n.t("users.account.trailing whitespace") } validates :email, :presence => true, :confirmation => true validates :email, :if => proc { |u| u.email_changed? }, :uniqueness => { :case_sensitive => false } @@ -211,7 +217,7 @@ class User < ActiveRecord::Base .where("id != ?", id) .where(sql_for_area) .where("#{sql_for_distance} <= ?", radius) - .order(sql_for_distance) + .order(Arel.sql(sql_for_distance)) .limit(num) else nearby = []