-
Notifications
You must be signed in to change notification settings - Fork 103
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ajout des champs customs de l'inscription dans le form du compte utilisateur #2904
base: develop
Are you sure you want to change the base?
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## develop #2904 +/- ##
===========================================
+ Coverage 78.43% 78.45% +0.01%
===========================================
Files 89 89
Lines 7214 7216 +2
===========================================
+ Hits 5658 5661 +3
+ Misses 1556 1555 -1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
@@ -138,6 +138,7 @@ def get_role(id_role): | |||
fields = user_fields.copy() | |||
if g.current_user == user: | |||
fields.add("email") | |||
fields.add("champs_addi") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
C'est pas mal la protection de ne rajouter les info "confidentielles" uniquement lorsque c'est l'utilisateur lui même qui demande la route. Je rajouterais bien des tests là dessus car ça peut être un beau leak de donnée + commentaire explicite sur le pourquoi on fait ça.
fields.add("champs_addi") | |
fields.update({"email", "champs_addi"}) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tu penses qu'au travers des champs addi, on puisse récupérer les mots de passes ?
e3e03eb
to
a18bd6d
Compare
A cause d'un historique altéré, cette PR est une copie de #2737.
Cette contribution est proposée et développée par @jbrieuclp.