From: Max Kanat-Alexander Date: Fri, 22 Oct 2010 23:56:55 +0000 (-0700) Subject: Bug 593138: When confirming a CSRF violation (the confirm-action page), X-Git-Tag: bugzilla-4.1.1~189 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3857fbed90c25c74b7fd095c469dcdb4d98c0cb9;p=thirdparty%2Fbugzilla.git Bug 593138: When confirming a CSRF violation (the confirm-action page), include an HTML comment describing the exact violation that occurred, so that screen-scrapers can know what violation they hit. r=mkanat, a=mkanat --- diff --git a/template/en/default/global/confirm-action.html.tmpl b/template/en/default/global/confirm-action.html.tmpl index e57a83c281..9f9be31dbc 100644 --- a/template/en/default/global/confirm-action.html.tmpl +++ b/template/en/default/global/confirm-action.html.tmpl @@ -27,6 +27,7 @@ style_urls = ['skins/standard/global.css'] %]
+ [% IF reason == "expired_token" %] Your changes have been rejected because you exceeded the time limit of [% constants.MAX_TOKEN_AGE FILTER html %] days before submitting your