arona/PyRIGS
1
0
Fork 0
mirror of https://github.com/nottinghamtec/PyRIGS.git synced 2026-01-17 05:22:16 +00:00
Code Issues Projects Releases Wiki Activity

Disable password reset as temporary fix to vulnerability (#396)

Browse Source 
Disabled password reset and left message notifying user of problem. In response to CVE-2019-19844
This commit is contained in:
Matthew Smith
2020-01-17 13:13:16 +00:00
committed by David Taylor
parent 4ad12ab40a
commit e0c6a56263
3 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
RIGS/views.py
View File

@@ -392,3 +392,7 @@ class ResetApiKey(generic.RedirectView):
self.request.user.save()
return reverse_lazy('profile_detail')
class PasswordResetDisabled(generic.TemplateView):
template_name = "RIGS/password_reset_disable.html"