Allow empty usernames again.

2025-03-01 19:00:15 +01:00
parent d129fd54ac
commit 3dfc19a051
1 changed files with 1 additions and 1 deletions
@@ -1024,7 +1024,7 @@ func (g *Group) userExists(username string) bool {
 // usernames might lead to security vulnaribilities.
 // For now, we just do the minimal validation that avoids path traversal.
 func validUsername(username string) bool {
-	return validGroupName(username)
+	return username == "" || validGroupName(username)
 }

 // called locked