mirror of https://github.com/pixelfed/pixelfed
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
AppRegisterController::onboarding took the username raw and validated it against unique:users and stored it case-sensitively. On PostgreSQL, whose string comparison and unique index are case-sensitive, this let a user register Alice while alice already existed, defeating the lowercase-username contract every other signup path enforces (Auth\RegisterController, ApiV1Dot1Controller::inAppRegistration, RemoteAuthController) and enabling lookalike accounts plus profile-cache confusion. Normalize username and email to lowercase on pgsql before validation and storage, so unique:users checks the same canonical form that is stored. Add AppRegisterOnboardingUsernameTest covering the pgsql, mysql and sqlite branches. |
2 days ago | |
|---|---|---|
| .. | ||
| Auth | 2 weeks ago | |
| Console/Commands | 2 days ago | |
| Contracts | 2 weeks ago | |
| Events | 1 week ago | |
| Exceptions | 1 week ago | |
| Facades | 2 weeks ago | |
| Federation | 7 days ago | |
| Http | 2 days ago | |
| Jobs | 2 days ago | |
| Listeners | 1 month ago | |
| 1 week ago | ||
| Models | 2 days ago | |
| Observers | 2 days ago | |
| Passport | 1 week ago | |
| Policies | 1 week ago | |
| Providers | 6 days ago | |
| Rules | 2 days ago | |
| Services | 2 days ago | |
| Support | 4 days ago | |
| Transformer | 2 days ago | |
| Util | 3 days ago | |
| HasSnowflakePrimary.php | 9 months ago | |
| helpers.php | 2 weeks ago | |