Skip to content

bugzilla
bugzilla
Commit 3857fbed authored by Max Kanat-Alexander's avatar Max Kanat-Alexander
Browse files
Options

Bug 593138: When confirming a CSRF violation (the confirm-action page),

include an HTML comment describing the exact violation that occurred, so that screen-scrapers can know what violation they hit. r=mkanat, a=mkanat
parent 4b2ebcb3
Hide whitespace changes
Inline Side-by-side
Showing with 1 addition and 0 deletions
template/en/default/global/confirm-action.html.tmpl
View file @ 3857fbed
...@@ -27,6 +27,7 @@ ...@@ -27,6 +27,7 @@
style_urls = ['skins/standard/global.css'] %] style_urls = ['skins/standard/global.css'] %]
<div class="throw_error"> <div class="throw_error">
<!--reason=[%reason FILTER html %]-->
[% IF reason == "expired_token" %] [% IF reason == "expired_token" %]
Your changes have been rejected because you exceeded the time limit Your changes have been rejected because you exceeded the time limit
of [% constants.MAX_TOKEN_AGE FILTER html %] days before submitting your of [% constants.MAX_TOKEN_AGE FILTER html %] days before submitting your
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment