pretix_original

mirror of https://github.com/pretix/pretix.git synced 2026-05-05 15:14:04 +00:00

Files

Lukas Bockstaller a643abe293 Prevent email enumeration (#1000 )

Here is my attempt to prevent user enumeration. 
I've made the following changes:

**Application:**
- replaces success and failure messages in the form with two (with/without redis) information messages 
- adds logging for attempted password resets of unknown users
- adds logging for failing emails

**Tests:**
- test_unknown asserts a redirect instead of a ok
- adds test_email_reset_twice_redis to assert the correct logging of a twice reset email 
- adds a FakeRedis class similiar to the one implemented in test_metrics.py. I could refactor them into the testutils folder if prefered. 

Please excuse the commit mess. I am currently fighting with my tooling.

2018-08-31 10:28:39 +02:00

__init__.py

Move tests to directory outside of the main package

2015-03-14 00:57:09 +01:00

test_auth.py

Prevent email enumeration (#1000 )

2018-08-31 10:28:39 +02:00

test_checkins.py

Fix #571 -- Partial payments and refunds

2018-08-06 12:24:36 +02:00

test_events.py

Upgrade to Django 2.1 (#710 )