MrUnknownDE/panel
1
0
Fork 0
mirror of https://github.com/MrUnknownDE/panel.git synced 2026-04-17 13:53:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

Don't allow blank passwords on the password change endpoint; closes #2750

Browse Source
This commit is contained in:
Dane Everitt
2020-11-29 13:28:46 -08:00
parent 16f49f8dc1
commit 7ebe04fb91
2 changed files with 26 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/Http/Requests/Api/Client/Account/UpdatePasswordRequest.php
View File

@@ -2,7 +2,6 @@
namespace Pterodactyl\Http\Requests\Api\Client\Account;
use Pterodactyl\Models\User;
use Pterodactyl\Http\Requests\Api\Client\ClientApiRequest;
use Pterodactyl\Exceptions\Http\Base\InvalidPasswordProvidedException;
@@ -32,8 +31,8 @@ class UpdatePasswordRequest extends ClientApiRequest
*/
public function rules(): array
{
$rules = User::getRulesForUpdate($this->user());
return ['password' => array_merge($rules['password'], ['confirmed'])];
return [
'password' => ['required', 'string', 'confirmed', 'min:8'],
];
}
}