From 2bd6eea2fafcd157cca7aa4c9db64ec6640ffe3b Mon Sep 17 00:00:00 2001 From: Julian Lam Date: Tue, 2 May 2023 11:47:54 -0400 Subject: [PATCH] fix: #11554, email requirement bypass by sending in whitespace --- src/user/interstitials.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/user/interstitials.js b/src/user/interstitials.js index aa70e8098f..bebf12b12b 100644 --- a/src/user/interstitials.js +++ b/src/user/interstitials.js @@ -40,6 +40,10 @@ Interstitials.email = async (data) => { issuePasswordChallenge: !!data.userData.uid && hasPassword, }, callback: async (userData, formData) => { + if (formData.email) { + formData.email = String(formData.email).trim(); + } + // Validate and send email confirmation if (userData.uid) { const isSelf = parseInt(userData.uid, 10) === parseInt(data.req.uid, 10);