stable

Clone or download

Read-only

Merge 'gerrit #10714' into stable/master

* commit 'd6701289ae': request #11217 Account takeover due to a missing CSRF protection Change-Id: Id29f45cfa402f0cb378b9f257d1e7adb4b0d40be

Modified Files

Name
M site-content/en_US/account/account.tab +0 −23 Go to diff View file
M site-content/fr_FR/LC_MESSAGES/tuleap-core.po +94 −1 Go to diff View file
M site-content/fr_FR/account/account.tab +0 −23 Go to diff View file
M site-content/tuleap-core.pot +72 −0 Go to diff View file
M src/common/autoload.php +5 −2 Go to diff View file
M src/common/dao/UserDao.class.php +10 −0 Go to diff View file
M src/common/event/Event.class.php +0 −10 Go to diff View file
M src/common/system_event/SystemEventManager.class.php +0 −6 Go to diff View file
A src/common/user/Account/ChangePasswordController.php +171 −0 Go to diff View file
A src/common/user/Account/ChangePasswordPresenter.php +40 −0 Go to diff View file
M src/common/user/UserManager.class.php +5 −0 Go to diff View file
A src/templates/user/change-email-complete.mustache +9 −0 Go to diff View file
A src/templates/user/change-email-confirm.mustache +7 −0 Go to diff View file
A src/templates/user/change-email.mustache +17 −0 Go to diff View file
M src/www/account/change_email-complete.php +7 −43 Go to diff View file
M src/www/account/change_email-confirm.php +23 −57 Go to diff View file
M src/www/account/change_email.php +23 −41 Go to diff View file
M src/www/project/admin/editgenericmember.php +1 −1 Go to diff View file