Refuse nullbyte as password

Closes #26
This commit is contained in:
Denis Natusch 2023-11-20 22:20:52 +01:00 committed by Simon Bruder
parent 27fdc3ef02
commit eccff8d2b0
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC

View file

@ -39,6 +39,9 @@ public class UserController {
if (result.hasErrors()){
return "register";
}
if (form.getPassword().chars().anyMatch(Character::isISOControl)) {
return "register";
}
userManagement.createCustomer(form.getUsername(),form.getAddress(),form.getPassword(),form.getFullName());
return "redirect:/login";
}
@ -68,7 +71,9 @@ public class UserController {
user.setFullName(form.getFullName());
user.setAddress(form.getAddress());
if (!form.getPassword().get().isEmpty()) {
userManagement.setPassword(form.getPassword().get(), user.getUserAccount());
if (form.getPassword().get().chars().anyMatch(Character::isISOControl)) {
userManagement.setPassword(form.getPassword().get(), user.getUserAccount());
}
}
userManagement.save(user);