aboutsummaryrefslogtreecommitdiffstats
path: root/app
diff options
context:
space:
mode:
Diffstat (limited to 'app')
-rw-r--r--app/controllers/application_controller.rb3
-rw-r--r--app/views/general/exception_caught.html.erb5
-rw-r--r--app/views/user/_signin.html.erb2
-rw-r--r--app/views/user/signchangeemail.html.erb2
-rw-r--r--app/views/user/signchangepassword.html.erb4
5 files changed, 8 insertions, 8 deletions
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 4d3f40d40..1ccf7e5db 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -17,6 +17,9 @@ class ApplicationController < ActionController::Base
# assign our own handler method for non-local exceptions
rescue_from Exception, :with => :render_exception
+ # Add some security-related headers (see config/initializers/secure_headers.rb)
+ ensure_security_headers
+
# Standard headers, footers and navigation for whole site
layout "default"
include FastGettext::Translation # make functions like _, n_, N_ etc available)
diff --git a/app/views/general/exception_caught.html.erb b/app/views/general/exception_caught.html.erb
index 8d78e2e92..21223dc1e 100644
--- a/app/views/general/exception_caught.html.erb
+++ b/app/views/general/exception_caught.html.erb
@@ -12,13 +12,10 @@
<%= submit_tag _("Search") %>
<% end %>
</li>
- </ul>
+ </ul>
<% else %>
<h1><%= _("Sorry, there was a problem processing this page") %></h1>
<p><%= _('You have found a bug. Please <a href="{{contact_url}}">contact us</a> to tell us about the problem', :contact_url => help_contact_path) %></p>
<% end %>
- <h2><%= _('Technical details') %></h2>
- <p><strong><%= h(@exception_class ? @exception_class : _("Unknown")) %></strong></p>
- <p><strong><%= h(@exception_message) %></strong></p>
</div>
diff --git a/app/views/user/_signin.html.erb b/app/views/user/_signin.html.erb
index afc55d249..864951733 100644
--- a/app/views/user/_signin.html.erb
+++ b/app/views/user/_signin.html.erb
@@ -14,7 +14,7 @@
<p>
<label class="form_label" for="user_signin_password"><%= _('Password:')%></label>
- <%= password_field 'user_signin', 'password', { :size => 15, :tabindex => 20 } %>
+ <%= password_field 'user_signin', 'password', { :size => 15, :tabindex => 20, :autocomplete => 'off' } %>
</p>
<p class="form_note">
diff --git a/app/views/user/signchangeemail.html.erb b/app/views/user/signchangeemail.html.erb
index 7308179f4..a99bcb785 100644
--- a/app/views/user/signchangeemail.html.erb
+++ b/app/views/user/signchangeemail.html.erb
@@ -23,7 +23,7 @@
<p>
<label class="form_label" for="signchangeemail_password"> <%= _('Your password:')%></label>
- <%= password_field 'signchangeemail', 'password', { :size => 15 } %>
+ <%= password_field 'signchangeemail', 'password', { :size => 15, :autocomplete => 'off' } %>
</p>
<p class="form_note">
diff --git a/app/views/user/signchangepassword.html.erb b/app/views/user/signchangepassword.html.erb
index 51bcb466d..60f5d2c62 100644
--- a/app/views/user/signchangepassword.html.erb
+++ b/app/views/user/signchangepassword.html.erb
@@ -13,12 +13,12 @@
<p>
<label class="form_label" for="user_password"><%= _('New password:')%></label>
- <%= password_field 'user', 'password', { :size => 15 } %>
+ <%= password_field 'user', 'password', { :size => 15, :autocomplete => 'off' } %>
</p>
<p>
<label class="form_label" for="user_password_confirmation"><%= _('New password: (again)')%></label>
- <%= password_field 'user', 'password_confirmation', { :size => 15 } %>
+ <%= password_field 'user', 'password_confirmation', { :size => 15, :autocomplete => 'off' } %>
</p>
<div class="form_button">