Merge pull request #3781 from overleaf/jpa-xss-18

[views] mitigate Angular XSS in the user-activate module GitOrigin-RevId: 88a4501699b92e33c7ee120d180e60825d82fbd5
2026-11-12 21:23:45 +01:00 · 2021-03-23 03:05:21 +00:00
parent 535c97e8cf
commit b19bd1ef61
1 changed files with 1 additions and 0 deletions
@@ -23,6 +23,7 @@ block content
 								type="hidden",
 								name="passwordResetToken",
 								value=token
+								ng-non-bindable
 							)
 							.alert.alert-danger(ng-show="activationForm.response.error")
 								| #{translate("activation_token_expired")}