aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Cgi/options.py
diff options
context:
space:
mode:
authorMark Sapiro <msapiro@value.net>2011-05-09 18:34:07 -0700
committerMark Sapiro <msapiro@value.net>2011-05-09 18:34:07 -0700
commit168f74f5b381070879789f8b6c4e4ee8b599dbd6 (patch)
treeff7e7aa77da017de17c03b29c242ee448acecc24 /Mailman/Cgi/options.py
parent68c8d57f95b53ed2dc204bf0ee617c650df00c9a (diff)
downloadmailman2-168f74f5b381070879789f8b6c4e4ee8b599dbd6.tar.gz
mailman2-168f74f5b381070879789f8b6c4e4ee8b599dbd6.tar.xz
mailman2-168f74f5b381070879789f8b6c4e4ee8b599dbd6.zip
Prevented setting user passwords with leading/trailing whitespace. Bug #778088.
Diffstat (limited to 'Mailman/Cgi/options.py')
-rw-r--r--Mailman/Cgi/options.py6
1 files changed, 3 insertions, 3 deletions
diff --git a/Mailman/Cgi/options.py b/Mailman/Cgi/options.py
index 6841ae64..6316af6e 100644
--- a/Mailman/Cgi/options.py
+++ b/Mailman/Cgi/options.py
@@ -1,4 +1,4 @@
-# Copyright (C) 1998-2010 by the Free Software Foundation, Inc.
+# Copyright (C) 1998-2011 by the Free Software Foundation, Inc.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
@@ -434,8 +434,8 @@ address. Upon confirmation, any other mailing list containing the address
options_page(mlist, doc, user, cpuser, userlang)
print doc.Format()
return
- newpw = cgidata.getvalue('newpw')
- confirmpw = cgidata.getvalue('confpw')
+ newpw = cgidata.getvalue('newpw', '').strip()
+ confirmpw = cgidata.getvalue('confpw', '').strip()
if not newpw or not confirmpw:
options_page(mlist, doc, user, cpuser, userlang,
_('Passwords may not be blank'))