Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Avoid Username/Email is passed as clear GET Parameter to CheckEmailAction on password reset process #1695

Merged
merged 6 commits into from
Aug 26, 2024
Merged

Avoid Username/Email is passed as clear GET Parameter to CheckEmailAction on password reset process #1695

merged 6 commits into from
Aug 26, 2024

Commits on Aug 26, 2024

  1. Remove usage of username get parameter in CheckEmailAction.php 

    Remove usage as discussed in #1692 (comment)
    @BA-JBI @VincentLanglet
    BA-JBI authored and VincentLanglet committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    c17f6a4 View commit details
    Browse the repository at this point in the history

  2. Dont pass username to CheckEmailAction.php 

    Remove passing username as get Parameter to sonata_user_admin_resetting_check_email as discussed in #1692 (comment)
    @BA-JBI @VincentLanglet
    BA-JBI authored and VincentLanglet committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    bd84301 View commit details
    Browse the repository at this point in the history

  3. Remove Service injection of UrlGenerator for CheckEmailAction

    @BA-JBI @VincentLanglet
    BA-JBI authored and VincentLanglet committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    e60acb9 View commit details
    Browse the repository at this point in the history

  4. Fix Parameter injection for CheckEmailAction

    @BA-JBI @VincentLanglet
    BA-JBI authored and VincentLanglet committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    00b5717 View commit details
    Browse the repository at this point in the history

  5. Add backward compatibility and avoid breaking change for CheckEmailAc… 

    …tion
    @BA-JBI @VincentLanglet
    BA-JBI authored and VincentLanglet committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    ef6fbe3 View commit details
    Browse the repository at this point in the history

  6. Fix

    @VincentLanglet
    VincentLanglet committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    196a602 View commit details
    Browse the repository at this point in the history