Validate hex color codes

jgniecki · Oct 3, 2024 · b95436b · b95436b
1 parent b963cdb
commit b95436b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/Generator/HtmlGenerator.php b/src/Generator/HtmlGenerator.php
@@ -46,6 +46,11 @@ public function generate(MotdItemCollection $collection): string
 
             if ($motdItem->getColor()) {
                 if (str_contains($motdItem->getColor(), '#')) {
+                    // Only allow valid hex color codes (without alpha channel), such as #FFF and #000000.
+                    if(!preg_match('/^#(([0-9A-Fa-f]{2}){3}|[0-9A-Fa-f]{3})$/i', $motdItem->getColor())) {
+                        continue;
+                    }
+
                     $tags['span'][] = sprintf('color: %s;', $this->escape($motdItem->getColor()));
                 } else {
                     $color = $this->colorCollection->get($motdItem->getColor());