Jonathan Trowbridge 2ad422ca9b fix(users): fix for users.profile.server.controller.js security (#1338) ...

* Fix for users.profile.server.controller.js security (#1338)

Fixes an issue where if req.body._id was not set to the current user it
could potentially log the current user in as another user.

Don't use req.body._id when editing user

Prevents a user from being logged in as another if edit user form _id is
not their own.

Fixes #1338

2016-06-18 18:12:08 +03:00

..

users

fix(users): fix for users.profile.server.controller.js security (#1338)

2016-06-18 18:12:08 +03:00

admin.server.controller.js

feat(config): Deprecate JSHint in favor of ESLint

2016-03-15 19:11:12 +01:00

users.server.controller.js

fix(docs): Fix comments content and style

2016-01-17 11:46:11 +01:00