urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

followup

master
Joey Hess 2018-12-12 10:43:52 -04:00
parent bf71bc8119
commit 319b96476b
No known key found for this signature in database
GPG Key ID: DB12DB0FF05F8F38
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
doc/bugs/Unable_to_access_pagespec_preferences_on_https:__47____47__joeyh.name__47__/comment_1_8e26ec8941be9f6b16cec97281df7aaf._comment 100644
View File

@ -0,0 +1,17 @@
[[!comment format=mdwn
username="joey"
subject="""comment 1"""
date="2018-12-12T14:40:46Z"
content="""
Sending an auth token with every notification email would
not be good from a security POV.
But, the ikiwiki username that has subscribed could be included in the
emails; the url to the prefs could possibly even have it prefilled
(unless CSRF protection or something prevents that).
> I think now when I login via either method I'm accessing the account with a username
No, ikiwiki accounts are not connected like this. If you log in with the
old account it will have separate subscription prefs than the new account.
"""]]