From 12c7adc2e7a748941853a43102ec73e07d51850b Mon Sep 17 00:00:00 2001 From: Tobias Markmann Date: Tue, 17 Nov 2009 11:31:59 +0100 Subject: Add check for forbidden char sequences in validate_username(). --- util/sasl/scram.lua | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/util/sasl/scram.lua b/util/sasl/scram.lua index 9362cca7..c3bc9600 100644 --- a/util/sasl/scram.lua +++ b/util/sasl/scram.lua @@ -60,7 +60,8 @@ end local function validate_username(username) -- check for forbidden char sequences - + for eq in s:gmatch("=(.?.?)") do + if eq ~= "2D" and eq ~= "3D" then return false end end return true; -- replace =2D with , and =3D with = -- apply SASLprep -- cgit v1.2.3