diff options
| author |   Rotundo, Al (ar3165) <ar3165@att.com> | 2019-07-31 14:46:56 +0000 |
|---|---|---|
| committer |   Timoney, Dan (dt5972) <dtimoney@att.com> | 2019-07-31 14:31:07 -0400 |
| commit | 18dcbec3a5a99a57d0ef43a06a99c2ab17c2eed6 (patch) | |
| tree | 39c938d972c6a3fefbb5c8350c2141fb8ee1e5eb /admportal/views/partials/newuserform.ejs | |
| parent | 33e9f85700d3ba17f95a69011d2d2932d4b98df0 (diff) | |
Added new modules to help prevent Cross Site Request Forgery
Made changes to prevent arbitrary code exection on AdmPortal.
Issue-ID: OJSI-40
Change-Id: I5ec60e2585413f3948c2540bd502dd1393794267
Signed-off-by: Rotundo, Al (ar3165) <ar3165@att.com>
Former-commit-id: 3d54c9ad35ef5e7a4b13948e718a4ad2830cbb04
Diffstat (limited to 'admportal/views/partials/newuserform.ejs')
| -rw-r--r-- | admportal/views/partials/newuserform.ejs | 15 |
1 files changed, 8 insertions, 7 deletions
diff --git a/admportal/views/partials/newuserform.ejs b/admportal/views/partials/newuserform.ejs index 60459947..61bf2ddc 100644 --- a/admportal/views/partials/newuserform.ejs +++ b/admportal/views/partials/newuserform.ejs @@ -1,32 +1,33 @@ -<div class="modal fade" id="newUserModal" tabindex="-1" role="dialog" aria-labelledby="newUserModalLabel" aria-hidden="true"> +<div class="modal fade" id="new_user" tabindex="-1" role="dialog" aria-labelledby="new_user" aria-hidden="true"> <div class="modal-dialog"> <div class="modal-content"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> - <h4 class="modal-title" id="newUserModalLabel">New User</h4> + <h4 class="modal-title">New User</h4> </div> <div class="modal-body"> <form id="addForm" name="addForm" role="form" action="/user/addUser" method="POST"> <div class="form-group"> - <label for="email">Email</label> - <input type="email" class="form-control" name="nf_email" id="nf_email"> + <label for="nf_email">Email</label> + <input type="email" class="form-control" name="nf_email" id="nf_email" placeholder="varchar(64)" maxlength="64" /> </div> <div class="form-group"> <label for="nf_password">Password</label> - <input type="password" class="form-control" name="nf_password" id="nf_password"> + <input type="password" class="form-control" name="nf_password" id="nf_password" /> </div> <div class="form-group"> <label for="nf_confirm_password">Confirm Password</label> - <input type="password" class="form-control" name="nf_confirm_password" id="nf_confirm_password"> + <input type="password" class="form-control" name="nf_confirm_password" id="nf_confirm_password" /> </div> <div class="form-group"> - <label for="privilege">Privilege</label> + <label for="nf_privilege">Privilege</label> <select class="form-control" name="nf_privilege" id="nf_privilege"> <option value=admin>Administrator</option> <option value=readonly>Readonly</option> </select> </div> <div class="form-group"> + <input type="hidden" name="_csrf" value="<%= privilege.csrfToken %>" /> <button type="button" class="btn btn-primary" onclick="submitUserAdmin(this.form);">Submit</button> <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button> </div> |