upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-08 16:26:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 12

fix: Improve string comparison

Browse source 
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
This commit is contained in:
Cleopatra Enjeck M. 2025-02-25 06:36:53 +00:00 committed by Enjeck
parent 6690a28cc0
commit a6d6a1fa9e
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/private/User/Session.php
View file

@ -780,7 +780,7 @@ class Session implements IUserSession, Emitter {
* Check if login names match
*/
private function validateTokenLoginName(?string $loginName, IToken $token): bool {
if (strtolower($token->getLoginName() ?? '') !== strtolower($loginName ?? '')) {
if (strcasecmp($token->getLoginName(), $loginName ?? '') !== 0) {
// TODO: this makes it impossible to use different login names on browser and client
// e.g. login by e-mail 'user@example.com' on browser for generating the token will not
// allow to use the client token with the login name 'user'.