Andal.LND/edx-platform
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add method attribute to make sure login, registration, password_reset, and financial_assistance forms are always submitted via POST. SEC-223

Browse Source
This commit is contained in:
Anthony Mangano
2016-12-06 17:30:05 -05:00
committed by e0d
parent bf2354697b
commit 296faa546f
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lms/templates/financial-assistance/financial_assessment_form.underscore
View File

@@ -6,7 +6,7 @@
<% }); %>
</div>
<form class="financial-assistance-form">
<form class="financial-assistance-form" method="POST">
<div class="status submission-error hidden" aria-live="polite">
<h4 class="message-title"><%- gettext('Unable to submit application') %></h4>
<ul class="message-copy"></ul>

2
lms/templates/student_account/login.underscore
View File

@@ -26,7 +26,7 @@
</div>
<% } %>
<form id="login" class="login-form" tabindex="-1">
<form id="login" class="login-form" tabindex="-1" method="POST">
<div class="section-title lines">
<h2>

2
lms/templates/student_account/password_reset.underscore
View File

@@ -3,7 +3,7 @@
<ul class="message-copy"></ul>
</div>
<form id="password-reset" class="password-reset-form" tabindex="-1">
<form id="password-reset" class="password-reset-form" tabindex="-1" method="POST">
<div class="section-title lines">
<h2>

2
lms/templates/student_account/register.underscore
View File

@@ -3,7 +3,7 @@
<ul class="message-copy"></ul>
</div>
<form id="register" class="register-form" autocomplete="off" tabindex="-1">
<form id="register" class="register-form" autocomplete="off" tabindex="-1" method="POST">
<% if (context.errorMessage) { %>
<div class="status submission-error">