kotovalexarian-likes-gitlab
/
hagrid-keyserver--hagrid
mirror of https://gitlab.com/hagrid-keyserver/hagrid.git
1
0
Fork 0
Code Releases Activity
hagrid-keyserver--hagrid/dist/templates/upload/verification-form.html.hbs

14 lines
410 B
Handlebars
Raw Normal View History

upload: Require POST for token verification In order to mitigate against MUAs previewing URLs, move the token verification flow to a POST handler, and add a new GET handler which returns a form requiring the user to click an additional time in order to verify their address. The returned form also carries some JavaScript which will attempt to do this for the user, meaning the experience for the user should be almost exactly as before, while mitigating MUA previews. Closes: #53 Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>
2019-09-26 19:04:48 +00:00
{{#> layout}}
<div class="row" id="container">
<p>
upload: simplify automatic POST request
2019-09-26 20:58:28 +00:00
Verifying your email address…
<form method="POST" action="/verify/{{token}}" id="postform">
If the process doesn't complete after a few seconds, <input type="submit" class="textbutton" value="click here" />.
</form>
upload: Require POST for token verification In order to mitigate against MUAs previewing URLs, move the token verification flow to a POST handler, and add a new GET handler which returns a form requiring the user to click an additional time in order to verify their address. The returned form also carries some JavaScript which will attempt to do this for the user, meaning the experience for the user should be almost exactly as before, while mitigating MUA previews. Closes: #53 Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>
2019-09-26 19:04:48 +00:00
</p>
</div>
<script src="/assets/js/upload-verify.js" type="text/javascript"></script>
{{/layout}}