Allow - in usernames because CSRF lesson requires username starting with prefix crsf- #476

2018-06-12 10:49:24 +02:00 · 2018-06-12 10:49:24 +02:00 · 1d2575a211
commit 1d2575a211
parent f383454440
1 changed files with 1 additions and 1 deletions
--- a/webgoat-container/src/main/java/org/owasp/webgoat/users/UserForm.java
+++ b/webgoat-container/src/main/java/org/owasp/webgoat/users/UserForm.java
@ -17,7 +17,7 @@ public class UserForm {

    @NotNull
    @Size(min=6, max=20)
-    @Pattern(regexp = "[a-zA-Z0-9]*", message = "can only contain letters and digits")
+    @Pattern(regexp = "[a-zA-Z0-9-]*", message = "can only contain letters, digits, and -")
    private String username;
    @NotNull
    @Size(min=6, max=10)