Clan character description limit of 500 is not enforced.

[Noeda]

https://junethack.net/clan/11111111111111111111111111111

Crafted one that has len(description) == 10000.

I think it's only enforced on the UI browser side, but if you bypass that and send it off wire, it'll accept anything. It seem like the line in clan.rb property :description, String, length: 500, :default => "" the length is not actually something that is enforced.

I'd dig deeper but as I'm writing this I have to run off for errands. I worry that if that's not enforced, are the other places where length: is specified more like a suggestion than an actually validated limit. My first guess is that it's mapped directly to SQL, and Sqlite3 will not enforce anything for you. But not sure. That would be first thing I'd educate myself on how this stuff is mapped to underlying DB stuff.