Chris Hill-Scott
64b5f03dcd
Don’t populate support form with arbitrary text
...
I don’t think it’s a massive risk (we’re certainly mitigating against
any XSS), but having a page on a GOV.UK domain where you can prefill
text on the page from a query string probably isn’t great.
So this commit restricts prefilling the support form to a set of
named questions.
2018-03-20 16:07:23 +00:00
..
2018-03-16 11:51:19 +00:00
2018-03-14 15:39:55 +00:00
2018-02-27 16:35:13 +00:00
2018-03-08 14:36:31 +00:00
2018-03-09 12:32:36 +00:00
2018-03-14 15:39:55 +00:00
2018-02-27 16:35:13 +00:00
2018-02-27 16:35:13 +00:00
2018-02-27 16:35:13 +00:00
2018-03-12 13:28:20 +00:00
2018-03-08 15:28:47 +00:00
2018-02-27 16:35:13 +00:00
2018-03-20 16:07:23 +00:00
2018-02-27 16:35:13 +00:00
2018-03-19 15:26:06 +00:00
2018-02-27 16:35:13 +00:00
2018-02-27 16:35:13 +00:00
2018-02-27 16:35:13 +00:00
2018-03-14 15:39:55 +00:00
2018-03-19 16:41:16 +00:00
2018-03-09 13:30:16 +00:00
2018-02-27 16:35:13 +00:00
2018-03-14 15:39:55 +00:00
2018-03-09 15:13:21 +00:00
2018-03-13 12:02:36 +00:00
2018-03-14 15:39:55 +00:00
2018-03-14 15:39:55 +00:00
2018-03-19 16:41:16 +00:00
2018-02-27 16:35:13 +00:00
2018-02-27 16:35:13 +00:00