encode username and password when sending login POST from ui

fixes #1553
This commit is contained in:
John Mitchell
2018-03-14 11:12:50 -04:00
committed by GitHub
parent 5c0a52df16
commit 17cdbef376

View File

@@ -49,11 +49,10 @@ export default
return getCSRFToken.then(function({data}) { return getCSRFToken.then(function({data}) {
var csrfmiddlewaretoken = /name='csrfmiddlewaretoken' value='([0-9a-zA-Z]+)' \//.exec(data)[1]; var csrfmiddlewaretoken = /name='csrfmiddlewaretoken' value='([0-9a-zA-Z]+)' \//.exec(data)[1];
// TODO: data needs to be encoded
return $http({ return $http({
method: 'POST', method: 'POST',
url: `/api/login/`, url: `/api/login/`,
data: `username=${username}&password=${password}&csrfmiddlewaretoken=${csrfmiddlewaretoken}&next=%2fapi%2f`, data: `username=${encodeURIComponent(username)}&password=${encodeURIComponent(password)}&csrfmiddlewaretoken=${csrfmiddlewaretoken}&next=%2fapi%2f`,
headers: { headers: {
'Content-Type': 'application/x-www-form-urlencoded' 'Content-Type': 'application/x-www-form-urlencoded'
} }