values from LDAP server are not validated
Open
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 17
- Forks
- 19
- Avg merge
- 11h 40m
- Merged PRs (30d)
- 2
Description
Email-Address or username can contain any kind of string and owncloud will accept it.
E.g. an Email-Address could match an other users username or a username can contain invalid characters that would not be possible in owncloud otherwise.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the LDAP user and email mapping entry points and any existing validation tests in the repository. Compare the accepted values with ownCloud's username and email rules, then define tests covering invalid characters and collisions between email addresses and usernames. Done means LDAP-provided values are rejected or handled consistently with native ownCloud values.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100