HomePhabricator

Require login for "Must Verify Email" controller

Description

Require login for "Must Verify Email" controller

Summary:
Via HackerOne. This page fatals if accessed directly while logged out.

The "shouldRequireLogin()" check is wrong; this is a logged-in page.

Test Plan:
Viewed the page while logged out, no more fatal.

Faked my way through the actual verification flow.

Reviewers: chad

Reviewed By: chad

Differential Revision: https://secure.phabricator.com/D16077

Details

Provenance
epriestleyAuthored on Jun 7 2016, 11:30 PM
epriestleyPushed on Jun 7 2016, 11:37 PM
Reviewer
chad
Differential Revision
D16077: Require login for "Must Verify Email" controller
Parents
rP9469e3d6ac7a: Embed videos in Remarkup at actual size
Branches
Unknown
Tags
Unknown
Build Status
Buildable 12557
Build 15931: Run Core Tests