fix: more casino, economy, gameplay, security, and world data hardening gaps

1 files changed, 8 insertions, 1 deletions

diff --git a/internal/game/casino.go b/internal/game/casino.go
index 4dfced6..dcf4273 100644
--- a/internal/game/casino.go
+++ b/internal/game/casino.go
@@ -932,7 +932,14 @@ func renderSlotSnapshot(snapshot *casino.SlotSnapshot, mode string, unicode bool
 			if reel < snapshot.StoppedReels {
 				value = snapshot.Grid[row][reel]
 			}
-			line += " " + colorSlotSymbol(mode, value) + strings.Repeat(" ", 7-len(value)) + " " + frameVertical
+			// Pad to the fixed 7-cell reel width; a malformed profile could
+			// otherwise make this negative and panic. Validation caps the id
+			// length, so this is a defence-in-depth backstop.
+			pad := 7 - len(value)
+			if pad < 0 {
+				pad = 0
+			}
+			line += " " + colorSlotSymbol(mode, value) + strings.Repeat(" ", pad) + " " + frameVertical
 		}
 		lines = append(lines, line)
 	}