mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Move the password fiels of chaging passwords to post 

* This is not actually used with GET (obviously). But else some scanners
  trip on it

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
This commit is contained in:
Roeland Jago Douma 2020-11-17 16:10:18 +01:00 committed by Morris Jobke
parent 86da5013c8
commit 3e982a3346
No known key found for this signature in database
GPG Key ID: FE03C3A163FEDE68
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/settings/templates/settings/personal/security/password.php
View File

@ -37,7 +37,7 @@ if ($_['passwordChangeSupported']) {
<h2 class="inlineblock"><?php p($l->t('Password'));?></h2> <h2 class="inlineblock"><?php p($l->t('Password'));?></h2>
<span id="password-error-msg" class="msg success hidden">Saved</span> <span id="password-error-msg" class="msg success hidden">Saved</span>
<div class="personal-settings-setting-box personal-settings-password-box"> <div class="personal-settings-setting-box personal-settings-password-box">
<form id="passwordform"> <form id="passwordform" method="POST">
<label for="pass1" class="hidden-visually"><?php p($l->t('Current password')); ?>: </label> <label for="pass1" class="hidden-visually"><?php p($l->t('Current password')); ?>: </label>
<input type="password" id="pass1" name="oldpassword" <input type="password" id="pass1" name="oldpassword"
placeholder="<?php p($l->t('Current password'));?>" placeholder="<?php p($l->t('Current password'));?>"