j3d1/webvirtcloud
1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-08 11:16:47 +00:00
Code Issues Projects Releases Wiki Activity
webvirtcloud/accounts
History
catborise 2cbcb8ab2c fix: the views that take a password or a key keep it out of error reports 
No view used sensitive_post_parameters, so once ADMINS is set the error
mail of a failing POST would carry the password or key in plain text.
The user create, edit and password views, the password change, the
compute forms, the host secrets, the VM's root password and its console
settings now mark their POST data sensitive.
2026-11-05 18:17:00 +03:00
..
migrations fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00
templates fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
templatetags lint with black python. convert f style strings to old one. some small fixes 2020-11-05 12:34:31 +03:00
tests fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
__init__.py Fixe migrations for new deployments 2020-05-28 18:19:25 +06:00
apps.py fix(accounts): migrate no longer overrides the change-password permission 2026-10-04 20:26:53 +03:00
auth.py fix(admin): a forced password change cannot trap a user or be skipped with a token 2026-10-26 10:12:53 +03:00
checks.py fix(accounts): migrate no longer overrides the change-password permission 2026-10-04 20:26:53 +03:00
forms.py feat(templates): the shared form and delete pages in a centred column 2026-10-31 18:10:05 +03:00
lockout.py feat(accounts): failed logins lock a user for the address they come from 2026-10-06 11:05:03 +03:00
middleware.py feat(admin): a password an administrator sets can be one the user must change 2026-10-25 22:38:40 +03:00
models.py fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00
otp.py fix(accounts): a username longer than the field is refused by the login form 2026-10-23 16:06:10 +03:00
urls.py fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
utils.py fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
views.py fix: the views that take a password or a key keep it out of error reports 2026-11-05 18:17:00 +03:00