Commit Graph

9 Commits

Author SHA1 Message Date
John Thiltges 6f98076281 Protect against XSS vulnerabilities in URL redirection
- Switch from base64 to URL encoding for the passing the URL, using the built-in Mako filtering
- Apply HTML filtering to Mako output by default
- Disable HTML filtering for nested templates in adduser, modify, and selfmodify
2019-01-02 14:31:10 -06:00
kakwa 3b6cf61b93 grotesque hacks to disable firefox autofilling of the forms 2016-07-06 20:37:24 +02:00
kakwa 7a1fb0dc8c modifying the templates to include custom ppolicy error message 2015-11-02 23:25:01 +01:00
kakwa 147cad3511 fix unicode 2015-06-27 22:35:34 +02:00
kakwa 965ad84b7a using html fieldset 2015-06-24 00:58:32 +02:00
kakwa 22fb758c83 fixing two columns layout 2015-06-10 23:30:16 +02:00
kakwa 2b52e121d1 adding basic js validation for forms 2015-06-03 23:57:22 +02:00
kakwa 9fe80cd491 narrower forms 2015-06-03 22:45:58 +02:00
kakwa d1e0c4be93 adding self modify page 2015-05-31 23:42:24 +02:00