Check login content before using it #239

Closed
opened 2024-02-19 06:59:41 +00:00 by pierre · 1 comment
Owner

Using username before properly checking if it is an acceptable username or email is unsafe and should be fixed.

Using username before properly checking if it is an acceptable username or email is unsafe and should be fixed. * Auth https://gitea.communiquons.org/pierre/BasicOIDC/src/commit/86e723f38cea0bba495daee127de3da368338d47/src/controllers/login_controller.rs#L137 * Admin https://gitea.communiquons.org/pierre/BasicOIDC/src/commit/86e723f38cea0bba495daee127de3da368338d47/src/controllers/admin_controller.rs#L116
Author
Owner

Fixed in e71fad8546

Fixed in e71fad85460b4a3de0c6e247eb0222ba769bc28f
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: pierre/BasicOIDC#239
No description provided.