infra
/
etesync
2
0
Fork 0
Code Issues Pull Requests Packages Activity

Login form: disallow connecting to HTTP addresses in production.

master
Tom Hacohen 2017-12-13 15:48:44 +00:00
parent 3231131e7e
commit ce2c89aa50
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/LoginForm.tsx
View File

@ -73,9 +73,18 @@ class LoginForm extends React.Component {
if (!encryptionPassword) {
errors.errorEncryptionPassword = fieldRequired;
}
if (process.env.NODE_ENV !== 'development') {
if (this.state.showAdvanced && !this.state.server.startsWith('https://')) {
errors.errorServer = 'Server URI must start with https://';
}
}
if (Object.keys(errors).length) {
this.setState({errors: errors});
return;
} else {
this.setState({errors: {}});
}
this.props.onSubmit(username, password, encryptionPassword, server);