Sunil Mohan Adapa 895d8cffbc

sso: Adjust URL to CAPTCHA page needed by Django security fix ...

Fixes: #2170.

Starting with Django 2.2.25, re_path behavior has changed. When the regular
expression ends with a '$', a full match is performed with the regular
expression. This breaks the behavior of how we are currently matching the locked
URLs for CAPTCHA based login forms.

Tests:

- All tests are done on Debian stable with Django 2.2.25 and on Debian unstable
with Django 3.2.10.

- Go to home page, click on login link. Enter wrong password three times.
CAPTCHA page is show with URL ending with /locked. Type the correct password and
login will be successful.

- Install tt-rss. Logout. Go to /tt-rss/, redirection will happen to login page.
Enter wrong password three times. CAPTCHA page is show with URL ending with
/locked. Type the correct password and login will be successful.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>

2022-01-16 10:15:32 -05:00

..

data

setup: Move app data files into respective apps

2019-03-17 16:20:57 -04:00

templates

users: Use common styling for users list

2020-12-19 16:26:47 +02:00

tests

*: Always pass check= argument to subprocess.run()

2021-10-11 14:34:40 -04:00

__init__.py

*: Drop use of module level version

2021-12-04 16:38:08 -05:00

components.py

users: Add component for managing users and groups

2020-04-04 09:31:35 -04:00

forms.py

users: Help set language cookie when user profile is edited

2021-10-09 21:03:23 -04:00

urls.py

sso: Adjust URL to CAPTCHA page needed by Django security fix

2022-01-16 10:15:32 -05:00

views.py

users: Help set language cookie when user profile is edited

2021-10-09 21:03:23 -04:00