Merge pull request #3755 from overleaf/jpa-xss-2

[views] mitigate Angular XSS via email/new_email

GitOrigin-RevId: 3d127c283ba9f97c5b0e6c53a9d77f7f597058bb
This commit is contained in:
Jakob Ackermann
2021-03-18 03:04:50 +00:00
committed by Copybot
parent 7609b741fa
commit f353728bda
5 changed files with 18 additions and 19 deletions
@@ -26,7 +26,7 @@ block content
)
.alert.alert-danger(ng-show="activationForm.response.error")
| #{translate("activation_token_expired")}
.form-group
label(for='email') #{translate("email")}
input.form-control(
@@ -35,7 +35,6 @@ block content
placeholder="email@example.com"
required,
ng-model="email",
ng-init="email = "+JSON.stringify(email),
ng-model-options="{ updateOn: 'blur' }",
disabled
)