Daniel Silverstone 6df212f087 upload: Require POST for token verification ... In order to mitigate against MUAs previewing URLs, move the token verification flow to a POST handler, and add a new GET handler which returns a form requiring the user to click an additional time in order to verify their address. The returned form also carries some JavaScript which will attempt to do this for the user, meaning the experience for the user should be almost exactly as before, while mitigating MUA previews. Closes: #53 Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>		2019-09-26 21:42:48 +02:00
..
fonts	ditch fontawesome for plain svgs	2019-05-14 16:27:12 +00:00
img	about: write "three months later" news entry	2019-09-12 21:12:59 +02:00
js	upload: Require POST for token verification	2019-09-26 21:42:48 +02:00
search.svg	ditch fontawesome for plain svgs	2019-05-14 16:27:12 +00:00
site.css	site.css: Add nowrap to span.email to reduce ugly rendering	2019-09-26 21:02:11 +02:00
site.js	restructure files	2019-05-14 16:27:12 +00:00
upload.svg	ditch fontawesome for plain svgs	2019-05-14 16:27:12 +00:00