umputun / tg-spam / 19440815139

83%

push

github

feat: validate bot username in /report@botname commands (#349)

* feat: validate bot username in /report@botname commands

only process /report@botname when botname matches actual bot username to prevent commands intended for other bots from being consumed.

changes:
- add BotUsername field to TelegramListener struct
- convert isReportCommand to method for access to bot username
- implement case-insensitive username comparison (telegram standard)
- handle edge cases: empty username, trailing whitespace, extra text
- reject @mention variants when bot username not configured (security)
- add comprehensive tests for all command variants and edge cases

Related to #348

* chore: add bot username to debug log output

* fix: prevent panic on whitespace-only username in /report@

use Fields to extract username and check for empty slice before accessing to avoid panic when afterAt contains only whitespace characters like tab or newline. this makes the code more defensive even though the initial TrimSpace already handles most cases.

add test cases for tab and newline after @ to ensure proper handling.

21 of 25 new or added lines in 2 files covered. (84.0%)

6211 of 7580 relevant lines covered (81.94%)

271.78 hits per line