Use userControl regexp to validate mail reset input (#461)

2012-04-24 13:22:05 +00:00 · 2012-04-24 13:22:05 +00:00 · 722efce84a
commit 722efce84a
parent 735654219c
1 changed files with 5 additions and 0 deletions
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/MailReset.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/MailReset.pm
@ -124,6 +124,11 @@ sub extractMailInfo {
        $self->{mail} = $self->param('mail');
    }

+    $self->{userControl} ||= '^[\w\.\-@]+$';
+
+    # Check mail
+    return PE_MALFORMEDUSER unless ( $self->{mail} =~ /$self->{userControl}/o );
+
    PE_OK;
 }