diff --git a/lib/push/validation.ts b/lib/push/validation.ts index ac5a8b4a..10fad1e7 100644 --- a/lib/push/validation.ts +++ b/lib/push/validation.ts @@ -6,5 +6,5 @@ export function isValidFcmToken(value: unknown): value is string { // FCM registration tokens are opaque. In practice they're ~140–250 chars of // [A-Za-z0-9:_-]. Be permissive on length; strict on charset to block // obvious garbage without rejecting future token formats. - return typeof value === 'string' && value.length >= 64 && value.length <= 4096 && /^[A-Za-z0-9:_\-]+$/.test(value); + return typeof value === 'string' && value.length >= 64 && value.length <= 4096 && /^[A-Za-z0-9:_-]+$/.test(value); }