Strip password before length check (#1155)

* Strip password before length check * Pin black to an older version
2025-12-20 15:24:25 +01:00 · 2019-11-06 15:25:39 +11:00
parent 6c5c63d667
commit 97f5dcaf8c
2 changed files with 2 additions and 2 deletions
--- a/CTFd/auth.py
+++ b/CTFd/auth.py
@@ -170,7 +170,7 @@ def register():
            .filter_by(email=email_address)
            .first()
        )
-        pass_short = len(password) == 0
+        pass_short = len(password.strip()) == 0
        pass_long = len(password) > 128
        valid_email = validators.validate_email(request.form["email"])
        team_name_email_check = validators.validate_email(name)