Software / code / prosody
Changeset
10913:54953b5a214b 0.11
util.sasl.plain: Apply saslprep to stored password
Fixes something like #1560 here too.
The password sent by the user already had saslprep applied.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Fri, 22 May 2020 21:05:45 +0200 |
| parents | 10912:646af16a3f32 |
| children | 10914:0d7d71dee0a0 |
| files | util/sasl/plain.lua |
| diffstat | 1 files changed, 1 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/util/sasl/plain.lua Fri May 22 20:59:01 2020 +0200 +++ b/util/sasl/plain.lua Fri May 22 21:05:45 2020 +0200 @@ -70,7 +70,7 @@ if self.profile.plain then local correct_password; correct_password, state = self.profile.plain(self, authentication, self.realm); - correct = (correct_password == password); + correct = (saslprep(correct_password) == password); elseif self.profile.plain_test then correct, state = self.profile.plain_test(self, authentication, password, self.realm); end
