lsm/Orchard
1
0
Fork 0
mirror of https://github.com/OrchardCMS/Orchard.git synced 2025-10-15 19:54:57 +08:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

#19896: Don't validate password inputs

Browse Source 
Work Item: 19896
This commit is contained in:
Sebastien Ros
2013-10-23 15:49:32 -07:00
parent d079d8aacd
commit 103e71d42f
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
View File

@@ -75,6 +75,7 @@ namespace Orchard.Users.Controllers {
[HttpPost] [HttpPost]
[AlwaysAccessible] [AlwaysAccessible]
[ValidateInput(false)]
[SuppressMessage("Microsoft.Design", "CA1054:UriParametersShouldNotBeStrings", [SuppressMessage("Microsoft.Design", "CA1054:UriParametersShouldNotBeStrings",
Justification = "Needs to take same parameter type as Controller.Redirect()")] Justification = "Needs to take same parameter type as Controller.Redirect()")]
public ActionResult LogOn(string userNameOrEmail, string password, string returnUrl, bool rememberMe = false) { public ActionResult LogOn(string userNameOrEmail, string password, string returnUrl, bool rememberMe = false) {
@@ -120,6 +121,7 @@ namespace Orchard.Users.Controllers {
[HttpPost] [HttpPost]
[AlwaysAccessible] [AlwaysAccessible]
[ValidateInput(false)]
public ActionResult Register(string userName, string email, string password, string confirmPassword) { public ActionResult Register(string userName, string email, string password, string confirmPassword) {
// ensure users can register // ensure users can register
var registrationSettings = _orchardServices.WorkContext.CurrentSite.As<RegistrationSettingsPart>(); var registrationSettings = _orchardServices.WorkContext.CurrentSite.As<RegistrationSettingsPart>();
@@ -249,6 +251,7 @@ namespace Orchard.Users.Controllers {
} }
[HttpPost] [HttpPost]
[ValidateInput(false)]
public ActionResult LostPassword(string nonce, string newPassword, string confirmPassword) { public ActionResult LostPassword(string nonce, string newPassword, string confirmPassword) {
IUser user; IUser user;
if ( (user = _userService.ValidateLostPassword(nonce)) == null ) { if ( (user = _userService.ValidateLostPassword(nonce)) == null ) {