fix: Fixed login CAPTCHA bypass vulnerability (#11185)

This commit is contained in:
CityFun
2025-12-04 10:10:23 +00:00
committed by GitHub
parent 781155b029
commit bf4d91b68b
+3 -4
View File
@@ -10,13 +10,12 @@ import (
var store = base64Captcha.DefaultMemStore
func VerifyCode(codeID string, code string) string {
if codeID == "" {
return "ErrCaptchaCode"
}
vv := store.Get(codeID, true)
vv = strings.TrimSpace(vv)
code = strings.TrimSpace(code)
if codeID == "" || code == "" {
return "ErrCaptchaCode"
}
if strings.EqualFold(vv, code) {
return ""
}