This commit is contained in:
Liam Brydon
2025-10-22 10:55:49 +13:00
parent ec0fc8cdc1
commit c663eaf7bd

View File

@ -158,6 +158,7 @@ def register(request):
if next := request.POST.get("next"):
context["next"] = next
# We are not allowing usernames or emails to contain any html (unlike using tags=s.ALLOWED_HTML_TAGS elsewhere)
username = nh3.clean(request.POST.get("username", "")).strip()
email = nh3.clean(request.POST.get("email", "")).strip()
password = request.POST.get("password", "").strip()