comparison mod_register_web/mod_register_web.lua @ 3725:19e43b7a969d

mod_register_web: Enforce strict username validation (on trunk, ignored otherwise)
author Kim Alvefur <zash@zash.se>
date Fri, 01 Nov 2019 23:21:50 +0100
parents 1c3c7d73c5a6
children cf3247ec5e01
comparison
equal deleted inserted replaced
3724:1c3c7d73c5a6 3725:19e43b7a969d
127 local password = form.password; 127 local password = form.password;
128 local confirm_password = form.confirm_password; 128 local confirm_password = form.confirm_password;
129 local jid = nil; 129 local jid = nil;
130 form.username, form.password, form.confirm_password = nil, nil, nil; 130 form.username, form.password, form.confirm_password = nil, nil, nil;
131 131
132 local prepped_username = nodeprep(username); 132 local prepped_username = nodeprep(username, true);
133 if not prepped_username then 133 if not prepped_username then
134 return nil, "Username contains forbidden characters"; 134 return nil, "Username contains forbidden characters";
135 end 135 end
136 if #prepped_username == 0 then 136 if #prepped_username == 0 then
137 return nil, "The username field was empty"; 137 return nil, "The username field was empty";