Vishnu Ks d4ee3023b2 registration: Require an explicit realm on PreregistrationUser. ...

This completes the last commit's work to fix CVE-2017-0910, applying
to any invite links already created before the fix was deployed.  With
this change, all new-user registrations must match an explicit realm
in the PreregistrationUser row, except when creating a new realm.

[greg: rewrote commit message]

2017-11-27 14:59:34 -08:00

8.1 KiB

Raw Blame History

View Raw