Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Display Name / Email for LDAP (PlaceHolders) #13
I've added some additional code to get the display name / email from LDAP in a nice, flexible manner (see documentation in gitblit.properties).
Also, I've added some code to escape the user name - as it was allowing for LDAP injection attacks. Please see the test case for an example of what the user could type to bypass authentication (only if passwords are stored in LDAP as clear text - unlikely, but possible).