Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-31 02:55:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: don\'t begin processing local login if the passed-in username isn't even valid

Browse Source
This commit is contained in:
Julian Lam
2025-09-30 11:05:42 -04:00
parent 9a596d67f3
commit c3df68f2ed
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/controllers/authentication.js
View File

@@ -420,6 +420,10 @@ authenticationController.localLogin = async function (req, username, password, n
} }
const userslug = slugify(username); const userslug = slugify(username);
if (!utils.isUserNameValid(username) || !userslug) {
return next(new Error('[[error:invalid-username]]'));
}
const uid = await user.getUidByUserslug(userslug); const uid = await user.getUidByUserslug(userslug);
try { try {
const [userData, isAdminOrGlobalMod, canLoginIfBanned] = await Promise.all([ const [userData, isAdminOrGlobalMod, canLoginIfBanned] = await Promise.all([