fix: Form value hardening

Author: dogukanoksuz

internal/liman/settings.go

@@ -55,7 +55,7 @@ func GetSettings(user *models.User, server *models.Server, extension *models.Ext
 			continue
 		}
 
-		results[setting.Name] = aes256.Decrypt(setting.Value, decryptionKey)
+		results[setting.Name] = aes256.Decrypt(setting.Value, helpers.Env("APP_KEY", "")+setting.UserID+setting.ServerID)
 	}
 
 	return results, nil

pkg/helpers/form.go

@@ -18,6 +18,14 @@ func GetFormData(c *fiber.Ctx) map[string]string {
 
 	formValues := make(map[string]string)
 	for key, value := range multipart.Value {
+		if key == "" {
+			continue
+		}
+
+		if strings.Contains(strings.ToLower(key), "password") || strings.Contains(strings.ToLower(key), "token") {
+			continue
+		}
+
 		if len(value) > 0 {
 			formValues[key] = value[0]
 		}