mirror of https://github.com/zulip/zulip.git
d4ee3023b2
This completes the last commit's work to fix CVE-2017-0910, applying to any invite links already created before the fix was deployed. With this change, all new-user registrations must match an explicit realm in the PreregistrationUser row, except when creating a new realm. [greg: rewrote commit message] |
||
---|---|---|
.. | ||
confirm_email_change.html | ||
confirm_preregistrationuser.html | ||
link_does_not_exist.html | ||
link_expired.html | ||
link_malformed.html |