opensource/freeCodeCamp
3
0
Fork 0
mirror of https://github.com/freeCodeCamp/freeCodeCamp.git synced 2026-10-28 03:02:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(csrf): remove all csrf bypass

Browse Source
This commit is contained in:
Oliver Eyton-Williams
2020-03-17 23:28:23 +05:30
committed by mrugesh
parent f183df0d88
commit 23b899f50f
20 changed files with 84 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api-server/server/views/emails/user-request-sign-in.ejs
+2 -2
View File
@@ -1,9 +1,9 @@
Here's your sign in link. It will instantly sign you into freeCodeCamp.org - no password necessary:
<%= host %>/internal/passwordless-auth/?email=<%= loginEmail %>&token=<%= loginToken %>
<%= host %>/passwordless-auth/?email=<%= loginEmail %>&token=<%= loginToken %>
Note: this sign in link will expire after 15 minutes. If you need a new sign in link, go to https://www.freecodecamp.org/signin
See you soon!
- The freeCodeCamp.org Team
- The freeCodeCamp.org Team
api-server/server/views/emails/user-request-sign-up.ejs
+2 -2
View File
@@ -4,10 +4,10 @@ We have created a new account for you.
Here's your sign in link. It will instantly sign you into freeCodeCamp.org - no password necessary:
<%= host %>/internal/passwordless-auth/?email=<%= loginEmail %>&token=<%= loginToken %>
<%= host %>/passwordless-auth/?email=<%= loginEmail %>&token=<%= loginToken %>
Note: this sign in link will expire after 15 minutes. If you need a new sign in link, go to https://www.freecodecamp.org/signin
See you soon!
- The freeCodeCamp.org Team
- The freeCodeCamp.org Team