From 895309bf158ee49e6608187f95d6f93720f8a2e0 Mon Sep 17 00:00:00 2001
From: Runxi Yu <me@runxiyu.org>
Date: Sun, 23 Mar 2025 10:02:44 +0800
Subject: Forbid long submissions

---
 main.go | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

(limited to 'main.go')

diff --git a/main.go b/main.go
index 06d43c2..c689165 100644
--- a/main.go
+++ b/main.go
@@ -68,11 +68,11 @@ func init() {
 {{- if .Message }}
 <p><strong>{{ .Message }}</strong></p>
 {{- end }}
-<p>Select a value, such that when it is appended to the decoded form of the following base64 string, and a SHA-256 hash is taken as a whole, the first {{ .NeedBits }} bits of the SHA-256 hash are zeros. Within one octet, higher bits are considered to be in front of lower bits.</p>
+<p>Select an nonce shorter than or equal to 32 bytes, such that when it is appended to the decoded form of the following base64 string, and a SHA-256 hash is taken as a whole, the first {{ .NeedBits }} bits of the SHA-256 hash are zeros. Within one octet, higher bits are considered to be in front of lower bits.</p>
 <p>{{ .UnsignedTokenBase64 }}</p>
 <form method="POST">
 <p>
-Encode your selected value in base64 and submit it below:
+Encode your selected nonce in base64 and submit it below:
 </p>
 <input name="powxy" type="text" />
 <input type="submit" value="Submit" />
@@ -221,6 +221,11 @@ func main() {
 			return
 		}
 
+		if len(nonce) > 32 {
+			authPage("Your submission was too long.")
+			return
+		}
+
 		h := sha256.New()
 		h.Write(expectedToken[:sha256.Size])
 		h.Write(nonce)
-- 
cgit v1.2.3