Allow form post to third party authentication providers

This commit is contained in:
Tom Hughes 2021-02-06 11:06:47 +00:00
parent afce133d86
commit bc233420dd

View file

@ -270,6 +270,10 @@ class UsersController < ApplicationController
end
def login
append_content_security_policy_directives(
:form_action => %w[accounts.google.com *.facebook.com login.live.com github.com meta.wikimedia.org]
)
session[:referer] = safe_referer(params[:referer]) if params[:referer]
if params[:username].present? && params[:password].present?