[Security] Create a character whitelist to prevent hiding usernames through unicode characters
complete
ExDe707
Using exclusively unicode characters like inverted pentagram or facsimile symbol in their names rulebreakers are able to hide their username everywhere except for in the output logs. Attempting to report anyone with a seemingly blank name like this in-game results in an error.
This makes it difficult to report offenders using this technique as you have to resort to a manual report. From what I understand the game cannot render exclusively unicode names with exotic characters. We require a character whitelist that allows common letters and symbols including non-latin scripts like kanji and cyrillic to prevent this misuse of usernames.
Log In
Ruuubick - Designer
complete
Sasha Mason
Apart from any malicious use, there is also the problem that someone changes their name to something with fancy characters only for those characters to not render ingame at all, meaning they are stuck with a name no one can read for 3 months before they can change it again.
ACiiL
Ability to view users by ID and migrate the ID text in clipboard will greatly help the issue. Log file name parsing is a mess left to the advanced users.
Also extend user ID usage into user search within the app and website.
100の人
Related by: Display an user ID in the menu to make reporting abuse easilier https://vrchat.canny.io/feature-requests/p/display-an-user-id-in-the-menu-to-make-reporting-abuse-easilier
Yueou
They hide their username and hack others avatar or crash others client or join a private room and we can't do anything to Report them because we can't see their User ID, Please solve this problem.
ExDe707
Yueou: You can report people with no username manually, I've made a guide on how to report those on reddit: https://www.reddit.com/r/VRchat/comments/cqsfoc/tutorial_how_to_report_users_with_no_name_in/
hakanai
I'd settle for a good fallback rendering for these characters, but sometimes it's more complicated than it seems to block blank characters, because sometimes blank characters exist to fulfil a specific purpose in a specific language. I remember trying to block all non-printing characters once, and then getting a support request from a user (I think it was Arabic but actually can't clearly remember that part) who was unable to enter their name using the proper Unicode.
MuffinOfGood
This i can not agree more with. Users are ban evading with these