From 71e0a35e06a58a3f6dae2af3a937f63ddf62d2c5 Mon Sep 17 00:00:00 2001 From: KITAITI Makoto Date: Sat, 18 Apr 2020 18:45:28 +0900 Subject: [PATCH] Use LenientForm instead Form for CSRF protected pages (#751) --- src/routes/session.rs | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/routes/session.rs b/src/routes/session.rs index 6c968720..4d79f6f4 100644 --- a/src/routes/session.rs +++ b/src/routes/session.rs @@ -3,7 +3,7 @@ use lettre::Transport; use rocket::http::ext::IntoOwned; use rocket::{ http::{uri::Uri, Cookie, Cookies, SameSite}, - request::{Form, LenientForm}, + request::LenientForm, response::{Flash, Redirect}, State, }; @@ -159,7 +159,7 @@ pub struct ResetForm { #[post("/password-reset", data = "
")] pub fn password_reset_request( mail: State<'_, Arc>>, - form: Form, + form: LenientForm, rockets: PlumeRocket, ) -> Ructe { if User::find_by_email(&*rockets.conn, &form.email).is_ok() { @@ -216,7 +216,7 @@ fn passwords_match(form: &NewPasswordForm) -> Result<(), ValidationError> { #[post("/password-reset/", data = "")] pub fn password_reset( token: String, - form: Form, + form: LenientForm, rockets: PlumeRocket, ) -> Result, Ructe> { form.validate()