diff options
| author | Lauri Ojansivu <x@xet7.org> | 2020-03-01 20:59:53 +0200 |
|---|---|---|
| committer | Lauri Ojansivu <x@xet7.org> | 2020-03-01 20:59:53 +0200 |
| commit | aac7c380c8c389b0683b2bd64e2cc856993f0e30 (patch) | |
| tree | 8d76eeb0202a1ae456e7d96c3ee59b83cfb77094 /client/components/settings/peopleBody.jade | |
| parent | fc35c234a78fb2137f0f78a3a6f353c46734ed72 (diff) | |
| download | wekan-aac7c380c8c389b0683b2bd64e2cc856993f0e30.tar.gz wekan-aac7c380c8c389b0683b2bd64e2cc856993f0e30.tar.bz2 wekan-aac7c380c8c389b0683b2bd64e2cc856993f0e30.zip | |
- Fix critical and moderate security vulnerabilities reported at 2020-02-26 with
responsible disclosure by [Dejan Zelic](https://twitter.com/dejandayoff),
Justin Benjamin and others at [Offensive Security](https://twitter.com/offsectraining),
that follow standard 90 days before public disclosure.
Thanks to xet7.
- Fix webhook error that prevented some card etc deleting from web UI of board.
Thanks to xet7.
- Add some more Font Awesome icons.
Thanks to xet7.
- Remove autofocus from many form input boxes so that they would not cause warnings.
Thanks to xet7.
Diffstat (limited to 'client/components/settings/peopleBody.jade')
| -rw-r--r-- | client/components/settings/peopleBody.jade | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/client/components/settings/peopleBody.jade b/client/components/settings/peopleBody.jade index ca4bc382..fef1067e 100644 --- a/client/components/settings/peopleBody.jade +++ b/client/components/settings/peopleBody.jade @@ -110,7 +110,7 @@ template(name="editUserPopup") label.hide.userId(type="text" value=user._id) label | {{_ 'fullname'}} - input.js-profile-fullname(type="text" value=user.profile.fullname autofocus) + input.js-profile-fullname(type="text" value=user.profile.fullname) label | {{_ 'username'}} span.error.hide.username-taken @@ -159,7 +159,7 @@ template(name="newUserPopup") //label.hide.userId(type="text" value=user._id) label | {{_ 'fullname'}} - input.js-profile-fullname(type="text" value="" autofocus) + input.js-profile-fullname(type="text" value="") label | {{_ 'username'}} span.error.hide.username-taken |