From 2b8dd3d202e1b285a20df8ed0390f78b95254998 Mon Sep 17 00:00:00 2001 From: Julian Lam Date: Tue, 2 May 2023 11:47:54 -0400 Subject: [PATCH] fix: #11554, email requirement bypass by sending in whitespace --- src/user/interstitials.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/user/interstitials.js b/src/user/interstitials.js index 9a0e96f6db..fe4c080be7 100644 --- a/src/user/interstitials.js +++ b/src/user/interstitials.js @@ -46,6 +46,10 @@ Interstitials.email = async (data) => { issuePasswordChallenge: !!data.userData.uid && hasPassword, }, callback: async (userData, formData) => { + if (formData.email) { + formData.email = String(formData.email).trim(); + } + // Validate and send email confirmation if (userData.uid) { const isSelf = parseInt(userData.uid, 10) === parseInt(data.req.uid, 10);