github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2024-11-21 20:47:08 -05:00
Code Issues Projects Releases Packages Wiki Activity
overleaf/services/web/app/coffee/Features/PasswordReset
History
Shane Kilkelly 0aaeb6671e Keep password reset token in session, and strip it from reset page url. 
This fixes an issue where the reset token was leaked in the referrer header
when navigating away from the password reset page to an external site.

Now we get the token from the query string, store it in the session,
then redirect to the bare url of the password reset page, which then
uses the stored token to render the reset form.
2015-08-24 11:53:33 +01:00
..
PasswordResetController.coffee Keep password reset token in session, and strip it from reset page url. 2015-08-24 11:53:33 +01:00
PasswordResetHandler.coffee fix Onetime token handler path 2015-05-27 15:06:36 +01:00
PasswordResetRouter.coffee split site into 2 routers, webRouter and apiRouter 2015-07-01 15:23:18 +01:00