Fix #5462 - attempt to change email without login

Require an active login when accessing the form to change an email
address associated with an account. This prevents a server crash when
a user is assumed to be part of the request.
This commit is contained in:
Andrew Browning 2016-07-19 00:16:48 -04:00
parent da686c1998
commit c49e5162ca

View File

@ -443,6 +443,7 @@ def verify_email(request):
user=user.username) user=user.username)
@require_active_login
def change_email(request): def change_email(request):
""" View to change the user's email """ """ View to change the user's email """
form = forms.ChangeEmailForm(request.form) form = forms.ChangeEmailForm(request.form)