Chris Hill-Scott 64b5f03dcd Don’t populate support form with arbitrary text ...

I don’t think it’s a massive risk (we’re certainly mitigating against
any XSS), but having a page on a GOV.UK domain where you can prefill
text on the page from a query string probably isn’t great.

So this commit restricts prefilling the support form to a set of
named questions.

2018-03-20 16:07:23 +00:00

..

__init__.py

…

add_service.py

Stop creating tour text messages as priority

2018-02-28 17:00:36 +00:00

api_keys.py

remove admin_override from all has_permissions usage

2018-03-06 13:08:07 +00:00

choose_account.py

redirect (301 MOVED PERMANENTLY) from old choose endpoints

2018-03-16 11:51:19 +00:00

code_not_received.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

conversation.py

Fix bug with inbound message page

2018-03-12 12:44:32 +00:00

dashboard.py

remove admin_override from all has_permissions usage

2018-03-06 13:08:07 +00:00

email_branding.py

dont use has_permissions to check for platform admins

2018-03-06 13:08:06 +00:00

feedback.py

Don’t populate support form with arbitrary text

2018-03-20 16:07:23 +00:00

forgot_password.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

inbound_number.py

dont use has_permissions to check for platform admins

2018-03-06 13:08:06 +00:00

index.py

Merge pull request #1954 from alphagov/choose-accounts

2018-03-19 15:26:06 +00:00

invites.py

add catch for http error on invite token check

2018-03-08 14:36:31 +00:00

jobs.py

Set template subject to Provided as PDF for precompiled letters

2018-03-09 12:32:36 +00:00

letter_jobs.py

dont use has_permissions to check for platform admins

2018-03-06 13:08:06 +00:00

manage_users.py

remove admin_override from all has_permissions usage

2018-03-06 13:08:07 +00:00

new_password.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

notifications.py

Moved the call to retrieve the pdf into the is_precompiled_letter block

2018-03-09 13:30:16 +00:00

organisations.py

organisations can be edited by anyone who belongs to that org

2018-03-14 15:39:55 +00:00

platform_admin.py

dont use has_permissions to check for platform admins

2018-03-06 13:08:06 +00:00

providers.py

dont use has_permissions to check for platform admins

2018-03-06 13:08:06 +00:00

register.py

rename choose_service to choose_account

2018-03-14 15:39:55 +00:00

send.py

Don’t validate phone numbers when sending emails

2018-03-16 14:17:43 +00:00

service_settings.py

Rename GovernmentDomain to AgreementInfo

2018-03-15 10:45:34 +00:00

sign_in.py

rename choose_service to choose_account

2018-03-14 15:39:55 +00:00

sign_out.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

styleguide.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

sub_navigation_dictionaries.py

Remove performance link from features nav

2017-12-01 10:16:40 +00:00

templates.py

remove admin_override from all has_permissions usage

2018-03-06 13:08:07 +00:00

two_factor.py

redirect to show_accounts_or_dashboard on login

2018-03-19 16:41:16 +00:00

user_profile.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

verify.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00