Who/Whom

"Who" is functioning as the object of a preposition. "Who" is a subject pronoun. A subject pronoun should not function as an object; therefore, "whom" should be used in this sentence.