rezometz/re2o - re2o - Gitea Rézo Metz-Rennes Fédérés

2499 Commits

211 Branches

14 Tags

12 MiB

Tree: e4d87a4fc7

Commit Graph

Author	SHA1	Message	Date
Alexandre Iooss	f4c9ac19cf	Override Django Contrib Auth templates This override Django Contrib Auth templates to make them more integrated with the user site. More precisely the breadcrumb now redirects to the index page rather to the Django Contrib Admin index page. It also fix a security vulnerability in Re2o. Without this patch users are able to request for a new password AND the existing login name. So just with access to someone mail, it would be possible to hack into his account. And yes, Re2o implements another password system. But this one is not disabled (see by yourself : https://intranet.crans.org/password_reset/). This also is part of the Aube patch-set for Re2o and one of Aube goal is to drop the custom admin password reset system and use the Django Contrib Auth one.	7 years ago

Author

SHA1

Message

Date

Alexandre Iooss

f4c9ac19cf

Override Django Contrib Auth templates

This override Django Contrib Auth templates to make them more integrated
with the user site.

More precisely the breadcrumb now redirects to the index page rather to
the Django Contrib Admin index page.

*It also fix a security vulnerability in Re2o.* Without this patch users
are able to request for a new password AND the existing login name. So
just with access to someone mail, it would be possible to hack into his
account.

And yes, Re2o implements another password system. But this one is not
disabled (see by yourself : https://intranet.crans.org/password_reset/).

This also is part of the Aube patch-set for Re2o and one of Aube goal is
to drop the custom admin password reset system and use the Django
Contrib Auth one.

7 years ago

1 Commits (e4d87a4fc7fa66ed217ff2b68afdfa2112bbf5fa)