[#114] Added :user_id component to email confirmation path to improve the security.

Added tests for `confirm_email` action.
2018-12-20 13:41:30 +03:00 · 2018-12-20 13:41:30 +03:00 · f69cbf4755
commit f69cbf4755
parent 8adcd1e80f
5 changed files with 26 additions and 10 deletions
--- a/lib/pleroma/emails/user_email.ex
+++ b/lib/pleroma/emails/user_email.ex
@ -70,6 +70,7 @@ defmodule Pleroma.UserEmail do
      Router.Helpers.confirm_email_url(
        Endpoint,
        :confirm_email,
+        user.id,
        to_string(user.info.confirmation_token)
      )