]> git.openstreetmap.org Git - rails.git/commitdiff
Protect against interception of confirmation emails
authorTom Hughes <tom@compton.nu>
Mon, 15 Nov 2010 21:41:32 +0000 (21:41 +0000)
committerTom Hughes <tom@compton.nu>
Mon, 15 Nov 2010 21:41:32 +0000 (21:41 +0000)
When processing an account confirmation email don't automatically
log the user in unless their browser session has a token that
matches the same user. Closes #3337.


No differences found