From: Max Kanat-Alexander Date: Fri, 22 Oct 2010 23:58:04 +0000 (-0700) Subject: Bug 593138: When confirming a CSRF violation (the confirm-action page), X-Git-Tag: bugzilla-4.0rc1~20 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c161c80fd71edc4dab675a261e5758b757933f81;p=thirdparty%2Fbugzilla.git Bug 593138: When confirming a CSRF violation (the confirm-action page), include an HTML comment describing the exact violation that occurred, so that screen-scrapers can know what violation they hit. r=mkanat, a=mkanat --- diff --git a/template/en/default/global/confirm-action.html.tmpl b/template/en/default/global/confirm-action.html.tmpl index e57a83c281..9f9be31dbc 100644 --- a/template/en/default/global/confirm-action.html.tmpl +++ b/template/en/default/global/confirm-action.html.tmpl @@ -27,6 +27,7 @@ style_urls = ['skins/standard/global.css'] %]
+ [% IF reason == "expired_token" %] Your changes have been rejected because you exceeded the time limit of [% constants.MAX_TOKEN_AGE FILTER html %] days before submitting your