Skip to content
Snippets Groups Projects
Unverified Commit 7763dd3e authored by Andrew Morgan's avatar Andrew Morgan Committed by GitHub
Browse files

Remove trailing slash ability from password reset's submit_token endpoint (#6074)

Remove trailing slash ability from the password reset submit_token endpoint. Since we provide the link in an email, and have never sent it with a trailing slash, there's no point for us to accept them on the endpoint.
parent aeb40f35
No related branches found
No related tags found
No related merge requests found
Prevent password reset's submit_token endpoint from accepting trailing slashes.
\ No newline at end of file
...@@ -200,7 +200,7 @@ class PasswordResetSubmitTokenServlet(RestServlet): ...@@ -200,7 +200,7 @@ class PasswordResetSubmitTokenServlet(RestServlet):
"""Handles 3PID validation token submission""" """Handles 3PID validation token submission"""
PATTERNS = client_patterns( PATTERNS = client_patterns(
"/password_reset/(?P<medium>[^/]*)/submit_token/*$", releases=(), unstable=True "/password_reset/(?P<medium>[^/]*)/submit_token$", releases=(), unstable=True
) )
def __init__(self, hs): def __init__(self, hs):
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment