Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-31 02:55:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: #11554, email requirement bypass by sending in whitespace

Browse Source
This commit is contained in:
Julian Lam
2023-05-02 11:47:54 -04:00
parent b3787bd50c
commit 2b8dd3d202
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/user/interstitials.js
View File

@@ -46,6 +46,10 @@ Interstitials.email = async (data) => {
issuePasswordChallenge: !!data.userData.uid && hasPassword, issuePasswordChallenge: !!data.userData.uid && hasPassword,
}, },
callback: async (userData, formData) => { callback: async (userData, formData) => {
if (formData.email) {
formData.email = String(formData.email).trim();
}
// Validate and send email confirmation // Validate and send email confirmation
if (userData.uid) { if (userData.uid) {
const isSelf = parseInt(userData.uid, 10) === parseInt(data.req.uid, 10); const isSelf = parseInt(userData.uid, 10) === parseInt(data.req.uid, 10);