exlim/cyberchef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: handle invalid character error in Generate HOTP (issue #2445)

Browse Source
This commit is contained in:
vanhci 2026-05-25 13:10:51 +08:00
parent 6a3a370bb1
commit 173abaf64a
1 changed files with 21 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/core/operations/GenerateHOTP.mjs
View File

@ -5,6 +5,7 @@
*/ */
import Operation from "../Operation.mjs"; import Operation from "../Operation.mjs";
import OperationError from "../errors/OperationError.mjs";
import * as OTPAuth from "otpauth"; import * as OTPAuth from "otpauth";
/** /**
@ -46,6 +47,7 @@ class GenerateHOTP extends Operation {
* *
*/ */
run(input, args) { run(input, args) {
try {
const secretStr = new TextDecoder("utf-8").decode(input).trim(); const secretStr = new TextDecoder("utf-8").decode(input).trim();
const secret = secretStr ? secretStr.toUpperCase().replace(/\s+/g, "") : ""; const secret = secretStr ? secretStr.toUpperCase().replace(/\s+/g, "") : "";
@ -62,6 +64,12 @@ class GenerateHOTP extends Operation {
const code = hotp.generate(); const code = hotp.generate();
return `URI: ${uri}\n\nPassword: ${code}`; return `URI: ${uri}\n\nPassword: ${code}`;
} catch (err) {
if (err instanceof TypeError) {
throw new OperationError("Invalid character found in input. HOTP secrets must be valid Base32 characters (A-Z, 2-7).");
}
throw err;
}
} }
} }