summaryrefslogtreecommitdiffstats
path: root/core/Controller
diff options
context:
space:
mode:
authorJosh Richards <josh.t.richards@gmail.com>2023-03-30 11:59:13 -0400
committerGitHub <noreply@github.com>2023-03-30 11:59:13 -0400
commit203b9131ec895cafbb10e9c2aacd6b2c45e6b9f4 (patch)
treed55d7985edc28882abd33e73db4cc4f18f24476d /core/Controller
parent636c2415cc8b119c89af5b59d2a9457f87d7cf0d (diff)
downloadnextcloud-server-203b9131ec895cafbb10e9c2aacd6b2c45e6b9f4.tar.gz
nextcloud-server-203b9131ec895cafbb10e9c2aacd6b2c45e6b9f4.zip
Trim the user/email provided for password resets
Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
Diffstat (limited to 'core/Controller')
-rw-r--r--core/Controller/LostController.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/core/Controller/LostController.php b/core/Controller/LostController.php
index 044535c345b..36b8dca6ddb 100644
--- a/core/Controller/LostController.php
+++ b/core/Controller/LostController.php
@@ -208,7 +208,7 @@ class LostController extends Controller {
// FIXME: use HTTP error codes
try {
- $this->sendEmail($user);
+ $this->sendEmail(trim($user));
} catch (ResetPasswordException $e) {
// Ignore the error since we do not want to leak this info
$this->logger->warning('Could not send password reset email: ' . $e->getMessage());