Ensure name doesn't contain any funky content.

Leantime · Jun 2, 2024 · efab082 · efab082
1 parent 8808c3c
commit efab082
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Domain/Auth/Services/Auth.php b/app/Domain/Auth/Services/Auth.php
@@ -323,7 +323,7 @@ public function setUserSession(mixed $user, bool $isLdap = false)
         $_SESSION['userdata'] = self::dispatch_filter('user_session_vars', [
                     'role' => $this->role,
                     'id' => $this->userId,
-                    'name' => $this->name,
+                    'name' => substr(strip_tags($this->name), 0, 12),
                     'profileId' => $this->profileId,
                     'mail' => $this->mail,
                     'clientId' => $this->clientId,