Fix for bug 95535: the token generator for password resets is allowing the &…

Fix for bug 95535: the token generator for password resets is allowing the & character to be used for tokens, but wasn't escaping them for the URL it emailed to users to use to get in to reset their password. Patch by Dave Miller <justdave@syndicomm.com> r= myk@mozilla.org
parent 0bfa7b27
......@@ -100,6 +100,7 @@ sub MailPasswordToken {
my $urlbase = &::Param("urlbase");
my $emailsuffix = &::Param('emailsuffix');
$token = &::url_quote($token);
open SENDMAIL, "|/usr/lib/sendmail -t";
......
......@@ -100,6 +100,7 @@ sub MailPasswordToken {
my $urlbase = &::Param("urlbase");
my $emailsuffix = &::Param('emailsuffix');
$token = &::url_quote($token);
open SENDMAIL, "|/usr/lib/sendmail -t";
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment