From 3857fbed90c25c74b7fd095c469dcdb4d98c0cb9 Mon Sep 17 00:00:00 2001 From: Max Kanat-Alexander Date: Fri, 22 Oct 2010 16:56:55 -0700 Subject: Bug 593138: When confirming a CSRF violation (the confirm-action page), include an HTML comment describing the exact violation that occurred, so that screen-scrapers can know what violation they hit. r=mkanat, a=mkanat --- template/en/default/global/confirm-action.html.tmpl | 1 + 1 file changed, 1 insertion(+) (limited to 'template/en/default') diff --git a/template/en/default/global/confirm-action.html.tmpl b/template/en/default/global/confirm-action.html.tmpl index e57a83c28..9f9be31db 100644 --- a/template/en/default/global/confirm-action.html.tmpl +++ b/template/en/default/global/confirm-action.html.tmpl @@ -27,6 +27,7 @@ style_urls = ['skins/standard/global.css'] %]
+ [% IF reason == "expired_token" %] Your changes have been rejected because you exceeded the time limit of [% constants.MAX_TOKEN_AGE FILTER html %] days before submitting your -- cgit v1.2.3-24-g4f1b