zulip

Commit Graph

Author	SHA1	Message	Date
Vishnu Ks	d4ee3023b2	registration: Require an explicit realm on PreregistrationUser. This completes the last commit's work to fix CVE-2017-0910, applying to any invite links already created before the fix was deployed. With this change, all new-user registrations must match an explicit realm in the PreregistrationUser row, except when creating a new realm. [greg: rewrote commit message]	2017-11-27 14:59:34 -08:00
Vishnu Ks	65ad72a674	confirmation: Create render_confirmation_key_error function.	2017-07-25 18:42:50 -07:00

Author

SHA1

Message

Date

Vishnu Ks

d4ee3023b2

registration: Require an explicit realm on PreregistrationUser.

This completes the last commit's work to fix CVE-2017-0910, applying
to any invite links already created before the fix was deployed.  With
this change, all new-user registrations must match an explicit realm
in the PreregistrationUser row, except when creating a new realm.

[greg: rewrote commit message]

2017-11-27 14:59:34 -08:00

Vishnu Ks

65ad72a674

confirmation: Create render_confirmation_key_error function.

2017-07-25 18:42:50 -07:00

2 Commits