Skip to content
This repository has been archived by the owner on Aug 23, 2020. It is now read-only.

Use classed based views for Django 1.11 #82

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

joshblum
Copy link

@joshblum joshblum commented Jun 8, 2017

Fixes #80 for Django 1.11. For other versions of django a fix is needed in password_reset_confirm.html to add the tag <meta name="referrer" content="never"> and rel="noreferrer" should be added to the anchor tag in password_reset_email.html. I didn't see either of these templates in the repository, so it may be best to just warn users of the issue of potentially leaking the reset token through the Referrer header.

@coveralls
Copy link

coveralls commented Jun 8, 2017

Coverage Status

Coverage decreased (-0.04%) to 90.37% when pulling dbdf7f6 on joshblum:fix-referrer into 9a4adc6 on lambdalisue:master.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Leaking of password reset token through the reset url
2 participants