Commit 9f963853 authored by dcouture's avatar dcouture

Change button type so the form doesn't submit

If someone enters their credentials in the sign-in page preview
just to try it out and clicks the Sign in button the credentials
will be shown in the URL because the form is submitted with GET
action. This MR changes the button type so the form simply can't be
submitted.

Changelog: security
parent 47e78292
...@@ -8,5 +8,5 @@ ...@@ -8,5 +8,5 @@
= label_tag :password = label_tag :password
= password_field_tag :password, nil, class: "form-control gl-form-input bottom", title: _('This field is required.') = password_field_tag :password, nil, class: "form-control gl-form-input bottom", title: _('This field is required.')
.form-group .form-group
= button_tag _("Sign in"), class: "btn gl-button btn-confirm" = button_tag _("Sign in"), class: "btn gl-button btn-confirm", type: "button"
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment