agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-05-24 17:51:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3767 from overleaf/jpa-xss-9

Browse Source 
[views] mitigate Angular XSS in email confirmation post gateway

GitOrigin-RevId: 11cd752d520054e448b3eeea431fe27f3c02fa00
This commit is contained in:
Jakob Ackermann
2021-03-17 12:46:41 +01:00
committed by Copybot
parent 115fe20184
commit 8766c23abb
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
services/web/app/views/user/confirm_email.pug
View File

@@ -18,11 +18,11 @@ block content
ng-cloak
)
input(type="hidden", name="_csrf", value=csrfToken)
input(type="hidden", name="token", value=token)
input(type="hidden", name="token", value=token ng-non-bindable)
form-messages(for="confirmEmailForm")
.alert.alert-success(ng-show="confirmEmailForm.response.success")
| Thank you, your email is now confirmed
p.text-center(ng-show="!confirmEmailForm.response.success && !confirmEmailForm.response.error")
i.fa.fa-fw.fa-spin.fa-spinner(aria-hidden="true")
|
|
| Confirming your email…