Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

All scripts of the user registration are loaded with a nonce

Download Browse

All the scripts on the multiple user registration pages have a nonce attribute. Alos took the opportunity to remove the usage of Prototype.JS in the script used to generate passwords. Part of request #17967: Deploy a useful content security policy Change-Id: I1b769bd2cb8f3f09f784d08ce92caff39750dcb3

+79 −45
Thomas Gerbet (tgerbet) 2021-05-04 13:59
Thomas Gerbet (tgerbet) 2021-05-05 10:59
abb304f897007dfe726505afe69ddbc8c04c5d48
fc8df458469f4e6193cdb2019d8b2b5ebd39861e
git #tuleap/stable/abb304f897007dfe726505afe69ddbc8c04c5d48

Modified Files

Side by side diff
Inline diff
Name
M .eslintignore +0 −1 Go to diff View file
M site-content/fr_FR/LC_MESSAGES/tuleap-core.po +3 −0 Go to diff View file
A src/scripts/account/generate-pw.ts +58 −0 Go to diff View file
M src/templates/account/register-admin.mustache +1 −1 Go to diff View file
M src/templates/account/register-form-end.mustache +0 −1 Go to diff View file
M src/webpack.common.js +1 −0 Go to diff View file
M src/www/account/register.php +16 −8 Go to diff View file
D src/www/scripts/user.js +0 −34 Go to diff View file