Closed Bug 1490026 Opened 2 years ago Closed 4 months ago
Logged out users can trigger updates with keyboard
44 bytes, text/x-github-pull-request
|Details | Review|
It is possible for a non-signed-in user to trigger a translation update (though it fails on the server) on the translate page. Even though that is risk-less, we should still not allow that to happen. Steps to reproduce (courtesy of Matjaz in bug 1483577#6): 1. Go to any translate page, e.g.: https://mozilla-pontoon-staging.herokuapp.com/sl/firefox/browser/branding/official/brand.dtd/?string=74127 2. Make sure you're logged out. 3. Press Tab 3 times to focus the translation field. 4. Press Enter to submit translation.
Assignee: nobody → s
Status: NEW → ASSIGNED
Assignee: s → michaelumanah
Status: ASSIGNED → RESOLVED
Closed: 4 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.