arona/PyRIGS
1
0
Fork 0
mirror of https://github.com/nottinghamtec/PyRIGS.git synced 2026-01-24 08:52:15 +00:00
Code Issues Projects Releases Wiki Activity

Disable password reset as temporary fix to vulnerability (#396)

Browse Source 
Disabled password reset and left message notifying user of problem. In response to CVE-2019-19844
This commit is contained in:
Matthew Smith
2020-01-17 13:13:16 +00:00
committed by David Taylor
parent 4ad12ab40a
commit e0c6a56263
3 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
RIGS/urls.py
View File

@@ -19,7 +19,7 @@ urlpatterns = [
url('^user/login/$', views.login, name='login'),
url('^user/login/embed/$', xframe_options_exempt(views.login_embed), name='login_embed'),
url(r'^user/password_reset/$', password_reset, {'password_reset_form': forms.PasswordReset}),
url(r'^user/password_reset/$', views.PasswordResetDisabled.as_view()),
# People
url(r'^people/$', permission_required_with_403('RIGS.view_person')(views.PersonList.as_view()),