Chris Hill-Scott 2124821e00 Don’t allow autocomplete on register page ...

This is a potential attack vector which was highlighted by the pen test.

Setting autocomplete to `nope` (or any random string) is the most comprehensive
way of telling browsers not to autocomplete a form according to:
https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion

2016-02-17 10:41:03 +00:00

..

assets

Remove ‘info’ banner type

2016-02-15 11:37:40 +00:00

main

Don’t show styleguide on live environment

2016-02-15 11:48:04 +00:00

notify_client

Merge pull request #172 from alphagov/upgrade_notifications_python_client

2016-02-12 09:46:15 +00:00

status

Status structure updated.

2016-02-02 16:44:42 +00:00

templates

Don’t allow autocomplete on register page

2016-02-17 10:41:03 +00:00

__init__.py

Make URLs for assets cache-proof

2016-02-10 16:00:29 +00:00

asset_fingerprinter.py

Make URLs for assets cache-proof

2016-02-10 16:00:29 +00:00

its_dangerous_session.py

Fix for bug of cookie expiry.

2016-02-15 11:43:16 +00:00

proxy_fix.py

…

version.py

Updated status endpoint info from travis build time and commit.

2016-02-02 15:13:22 +00:00