Replying to Avatar Ron Stoner

The “develop” branch of nostr-irc now protects you from accidentally posting your nsec private key. I’ll be merging to master once I have some other features updated. All it took was:

```

if re.search(r'nsec[a-z0-9]{32,64}$', user_input):

messages.addstr("\n *** Error: Potential exposure of nsec private key. Message denied.\n\n”)

```

Magic! 🎩🪄
Avatar
daniele 2y ago

Great idea!

But I would not limit the length check, if a single char is added by error the regex fails and you show the key.

I would use 'nsec1[a-z0-9]{16,}'.

PS: Why the final $? I don't use python, perhaps his regex engine has something special.

Reply to this note

Please Login to reply.

Discussion

Avatar
Ron Stoner 2y ago

Great call! I’ll remove the end limit and the $. $ is an anchor that matches the end of the string and it’s not needed for this re search.

Avatar
daniele 2y ago

Ah in fact, so the same regex use I'm used to.

We have saved a couple of burned keys ;)