Homec4science

Require login for "Must Verify Email" controller

Authored by epriestley <git@epriestley.com> on Jun 8 2016, 01:30.

Description

Require login for "Must Verify Email" controller

Summary:
Via HackerOne. This page fatals if accessed directly while logged out.

The "shouldRequireLogin()" check is wrong; this is a logged-in page.

Test Plan:
Viewed the page while logged out, no more fatal.

Faked my way through the actual verification flow.

Reviewers: chad

Reviewed By: chad

Differential Revision: https://secure.phabricator.com/D16077

Details

Committed
epriestley <git@epriestley.com>Jun 8 2016, 01:37
Pushed
aubortJan 31 2017, 17:16
Parents
rPH9469e3d6ac7a: Embed videos in Remarkup at actual size
Branches
Unknown
Tags
Unknown

Event Timeline

epriestley <git@epriestley.com> committed rPHffb50ef45d1b: Require login for "Must Verify Email" controller (authored by epriestley <git@epriestley.com>).Jun 8 2016, 01:37