search

OregonDigital / oregondigital_2

The active development on Oregon Digital 2 is in the https://github.com/OregonDigital/OD2 repo.
Other
1 stars 1 forks source link

Login, Password Reset, and others need to force HTTPS #311

Open revgum opened 8 years ago

revgum commented 8 years ago

"Forgot Password" email sent to the user includes an HTTP link to reset the password, and the app is not forcing HTTPS. This is a security concern.

Example links that should force HTTPS: http://oregondigital.org/users/sign_in http://oregondigital.org/users/password/edit?reset_password_token=blablahblabh