SessionsController: strip username

This commit is contained in:
Simon Legner 2024-02-11 21:20:27 +01:00
parent 90fd22e2a3
commit a0aef5c722
2 changed files with 9 additions and 1 deletions

View file

@ -20,7 +20,7 @@ class SessionsController < ApplicationController
def create
session[:remember_me] ||= params[:remember_me]
session[:referer] = safe_referer(params[:referer]) if params[:referer]
password_authentication(params[:username], params[:password])
password_authentication(params[:username].strip, params[:password])
end
def destroy