kotovalexarian-likes-gitlab
/
hagrid-keyserver--hagrid
mirror of https://gitlab.com/hagrid-keyserver/hagrid.git
1
0
Fork 0
Code Releases Activity
hagrid-keyserver--hagrid/dist/templates/upload/verification-form.html.hbs

18 lines
483 B
Handlebars
Raw Normal View History

upload: Require POST for token verification In order to mitigate against MUAs previewing URLs, move the token verification flow to a POST handler, and add a new GET handler which returns a form requiring the user to click an additional time in order to verify their address. The returned form also carries some JavaScript which will attempt to do this for the user, meaning the experience for the user should be almost exactly as before, while mitigating MUA previews. Closes: #53 Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>
2019-09-26 19:04:48 +00:00
{{#> layout}}
i18n: working i18n based on gettext
2019-09-27 14:21:10 +00:00
{{#with page}}
<div id="container">
upload: Require POST for token verification In order to mitigate against MUAs previewing URLs, move the token verification flow to a POST handler, and add a new GET handler which returns a form requiring the user to click an additional time in order to verify their address. The returned form also carries some JavaScript which will attempt to do this for the user, meaning the experience for the user should be almost exactly as before, while mitigating MUA previews. Closes: #53 Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>
2019-09-26 19:04:48 +00:00
<p>
i18n: working i18n based on gettext
2019-09-27 14:21:10 +00:00
{{ text "Verifying your email address…" }}
</p>
upload: simplify automatic POST request
2019-09-26 20:58:28 +00:00
i18n: working i18n based on gettext
2019-09-27 14:21:10 +00:00
<p>
upload: simplify automatic POST request
2019-09-26 20:58:28 +00:00
<form method="POST" action="/verify/{{token}}" id="postform">
i18n: incorporate feedback from AO
2019-10-31 13:02:41 +00:00
{{ text "If the process doesn't complete after a few seconds, please <input type=\"submit\" class=\"textbutton\" value=\"click here\" />." }}
upload: simplify automatic POST request
2019-09-26 20:58:28 +00:00
</form>
upload: Require POST for token verification In order to mitigate against MUAs previewing URLs, move the token verification flow to a POST handler, and add a new GET handler which returns a form requiring the user to click an additional time in order to verify their address. The returned form also carries some JavaScript which will attempt to do this for the user, meaning the experience for the user should be almost exactly as before, while mitigating MUA previews. Closes: #53 Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>
2019-09-26 19:04:48 +00:00
</p>
</div>
<script src="/assets/js/upload-verify.js" type="text/javascript"></script>
i18n: working i18n based on gettext
2019-09-27 14:21:10 +00:00
{{/with}}
upload: Require POST for token verification In order to mitigate against MUAs previewing URLs, move the token verification flow to a POST handler, and add a new GET handler which returns a form requiring the user to click an additional time in order to verify their address. The returned form also carries some JavaScript which will attempt to do this for the user, meaning the experience for the user should be almost exactly as before, while mitigating MUA previews. Closes: #53 Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>
2019-09-26 19:04:48 +00:00
{{/layout}}