NPE check for UsernameRule#validate(final PasswordData passwordData)

vt-middleware / passay

Password policy enforcement for Java.

http://www.passay.org

Other

282 stars 64 forks source link

NPE check for UsernameRule#validate(final PasswordData passwordData) #42

Closed ememisya closed 7 years ago

ememisya commented 8 years ago

UsernameRule validate implementation doesn't check for null when retrieving the username from PasswordData, which leads to a NPE on the line: String reverseUser = new StringBuilder(user).reverse().toString();