Adam Shimali 886d0c8c95 Added content security policy header. ...

unsafe-inline exception added to allow inline js scripts
we have in base govuk_template.

2016-01-12 11:08:10 +00:00

..

dao

When the user request a reset password link, the user.state is set to request_password_reset.

2016-01-11 12:23:08 +00:00

notify_client

Updated generate_token to use encrypt the entire url.

2016-01-11 15:18:37 +00:00

views

Added content security policy header.

2016-01-12 11:08:10 +00:00

__init__.py

109898688: All codes are valid until one code is used, then they are all marked used.

2015-12-17 14:33:20 +00:00

test_add_service_form.py

Refactor add-service form such that the dao is not exposed in the forms.

2016-01-04 15:31:50 +00:00

test_encyption.py

109526036: Updates as per comments made on pull request.

2015-12-10 15:21:06 +00:00

test_two_factor_form.py

Fix for security hole with setting session['user_id'] before second factor of authentication has been authorised.

2016-01-07 12:43:10 +00:00

test_validators.py

Removed exceptions, found a better way to handle them.

2016-01-11 12:23:08 +00:00

test_verify_form.py

Fix for security hole with setting session['user_id'] before second factor of authentication has been authorised.

2016-01-07 12:43:10 +00:00