diff options
| author | Josh Richards <josh.t.richards@gmail.com> | 2023-03-30 11:59:13 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-03-30 11:59:13 -0400 |
| commit | 203b9131ec895cafbb10e9c2aacd6b2c45e6b9f4 (patch) | |
| tree | d55d7985edc28882abd33e73db4cc4f18f24476d /core | |
| parent | 636c2415cc8b119c89af5b59d2a9457f87d7cf0d (diff) | |
| download | nextcloud-server-203b9131ec895cafbb10e9c2aacd6b2c45e6b9f4.tar.gz nextcloud-server-203b9131ec895cafbb10e9c2aacd6b2c45e6b9f4.zip | |
Trim the user/email provided for password resets
Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
Diffstat (limited to 'core')
| -rw-r--r-- | core/Controller/LostController.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/Controller/LostController.php b/core/Controller/LostController.php index 044535c345b..36b8dca6ddb 100644 --- a/core/Controller/LostController.php +++ b/core/Controller/LostController.php @@ -208,7 +208,7 @@ class LostController extends Controller { // FIXME: use HTTP error codes try { - $this->sendEmail($user); + $this->sendEmail(trim($user)); } catch (ResetPasswordException $e) { // Ignore the error since we do not want to leak this info $this->logger->warning('Could not send password reset email: ' . $e->getMessage()); |