#20277: Don't validate password inputs on Change Password

Work Item: 20277
This commit is contained in:
Nicholas Mayne
2014-06-23 22:34:58 +01:00
parent 22608e952b
commit 1936743ca0

View File

@@ -214,6 +214,7 @@ namespace Orchard.Users.Controllers {
[Authorize]
[HttpPost]
[AlwaysAccessible]
[ValidateInput(false)]
[SuppressMessage("Microsoft.Design", "CA1031:DoNotCatchGeneralExceptionTypes",
Justification = "Exceptions result in password not being changed.")]
public ActionResult ChangePassword(string currentPassword, string newPassword, string confirmPassword) {