• koper@feddit.nl
    link
    fedilink
    arrow-up
    24
    ·
    edit-2
    16 hours ago

    Why the password.trim()? Silently removing parts of the password can lead to dangerous bugs and tells me the developer didn’t peoperly consider how to sanitize input.

    I remember once my password for a particular organization had a space at the end. I could log in to all LDAP-connected applications, except for one that would insist my password was wrong. A trim() or similar was likely the culprit.

    • HamsterRage@lemmy.ca
      link
      fedilink
      arrow-up
      9
      ·
      13 hours ago

      The reason for leaving in the password.trim() would be one of the few things that I would ever document with a comment.

    • Aijan@programming.devOP
      link
      fedilink
      arrow-up
      12
      ·
      edit-2
      15 hours ago

      Thanks for the tip. password.trim() can indeed be problematic. I just removed that line.