Password length check. Fixes #1087

diff --git a/lemmy_api/src/user.rs b/lemmy_api/src/user.rs
index 4324c93689307f9928df5a0da264ddc0b701cbe6..17bb12093396f84b72198e3cb49361a534fe25f8 100644 (file)
--- a/lemmy_api/src/user.rs
+++ b/lemmy_api/src/user.rs
@@ -117,6 +117,11 @@ impl Perform for Register {
       }
     }
 
+    // Password length check
+    if data.password.len() > 60 {
+      return Err(APIError::err("invalid_password").into());
+    }
+
     // Make sure passwords match
     if data.password != data.password_verify {
       return Err(APIError::err("passwords_dont_match").into());