Login/Changepassword: change to verifying the hostname without the part.
Verifying the port was causing issues, and anyhow, this check is paranoid and isn't strictly necessary for security. The problem is that Django's `get_host()` and the equivalent on some platforms returns it without the port, though on others (like e.g. the library we use from JS) it returns with the port. This was inconsistent and was causing authentication to fail. We thus relaxed the test to not include the port when matching, which should make it work consistently across all platforms.master
parent
a6f5e070a4
commit
843b59a0ac
Loading…
Reference in New Issue