Jennifer Richards 98d7b15dfb fix: Only send password reset email to known, active addresses (#5061) ... * fix: Only send password reset email to known, active addresses Limits password reset to Users with a Person and at least one active address on file. Avoids the possibility of sending a password reset to a spoofed address as in CVE-2019-19844. * test: Use factory instead of explicit construction * test: Test that a User with no Person cannot reset password * fix: Fix handling of User.person field when it's null * test: Test that reset emails are sent to known, active addresses		2023-01-31 13:56:33 -06:00
..
management	refactor: replace datetime.now and datetime.today with timezone.now (#4211)	2022-08-25 13:45:16 -03:00
migrations	Merged in personal/henrik/django-1.7@9020 which upgrades Django from 1.6.0 to 1.7.4 and applies the needed changes to the datatracker code to work with release 1.7.x.	2015-02-08 21:16:44 +00:00
.gitignore	Introduce initial authentication/authorization linkage. This has a	2007-05-23 16:10:32 +00:00
__init__.py	Remove shim layer from ietfauth, delete some dead code and migrate	2013-12-05 16:24:03 +00:00
factories.py	Bring the factory-boy and Faker dependencies forward through some minor breaking changes. Stop using the deprecated fr_QC locale in Faker. Commit ready for merge.	2021-08-03 22:22:35 +00:00
forms.py	fix: Only send password reset email to known, active addresses (#5061)	2023-01-31 13:56:33 -06:00
htpasswd.py	Removed all __future__ imports.	2020-03-05 23:53:42 +00:00
tests.py	fix: Only send password reset email to known, active addresses (#5061)	2023-01-31 13:56:33 -06:00
urls.py	chore: Use codespell to fix typos in code. (#4797)	2022-12-07 15:10:35 -06:00
utils.py	feat: enable editorial stream adoption and balloting (#5011)	2023-01-31 13:50:51 -06:00
views.py	fix: Only send password reset email to known, active addresses (#5061)	2023-01-31 13:56:33 -06:00