ejabberdsql2prosody: Don't print password of imported accounts (thanks azerttyu)
[prosody.git] / util / sasl / plain.lua
index a4c8765da7a523c858f629d31a75ea1e3898060b..ae5c777a77423f466ecd5977f696e0f9bec7e313 100644 (file)
@@ -24,7 +24,7 @@ local function plain(self, message)
                return "failure", "malformed-request";
        end
 
-       local authorization, authentication, password = s_match(message, "^([^%z]+)%z([^%z]+)%z([^%z]+)");
+       local authorization, authentication, password = s_match(message, "^([^%z]*)%z([^%z]+)%z([^%z]+)");
 
        if not authorization then
                return "failure", "malformed-request";