mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-05-24 16:25:00 -04:00
Trim whitespace for feed passwords (#3158)
We output a space by default in the user interface for setting feed passwords, in order to prevent aggressive password autocompletion https://github.com/FreshRSS/FreshRSS/pull/881 However, user might not always override this white space when entering the password. So here we trim. (I believe legitimate leading / trailing spaces in passwords are sufficiently rare not to be a problem)
This commit is contained in:
committed by
GitHub
parent
20d0f9cd76
commit
48345403df
@@ -160,7 +160,7 @@ class FreshRSS_feed_Controller extends Minz_ActionController {
|
||||
// HTTP information are useful if feed is protected behind a
|
||||
// HTTP authentication
|
||||
$user = trim(Minz_Request::param('http_user', ''));
|
||||
$pass = Minz_Request::param('http_pass', '');
|
||||
$pass = trim(Minz_Request::param('http_pass', ''));
|
||||
$http_auth = '';
|
||||
if ($user != '' && $pass != '') { //TODO: Sanitize
|
||||
$http_auth = $user . ':' . $pass;
|
||||
|
||||
Reference in New Issue
Block a user