From 3dfc19a0519f5e5cc8084fc0982b8ec7b0b1e7c8 Mon Sep 17 00:00:00 2001 From: Juliusz Chroboczek Date: Sat, 1 Mar 2025 19:00:15 +0100 Subject: [PATCH] Allow empty usernames again. --- group/group.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/group/group.go b/group/group.go index 6e1f475..c0624a7 100644 --- a/group/group.go +++ b/group/group.go @@ -1024,7 +1024,7 @@ func (g *Group) userExists(username string) bool { // usernames might lead to security vulnaribilities. // For now, we just do the minimal validation that avoids path traversal. func validUsername(username string) bool { - return validGroupName(username) + return username == "" || validGroupName(username) } // called locked