From 2406fc4efeade10fa9836cf43dbc720d128a3ca1 Mon Sep 17 00:00:00 2001 From: Daniel Friesel Date: Fri, 3 Mar 2023 15:05:43 +0100 Subject: token: do not expose full checkin timestamp --- templates/journey.html.ep | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'templates/journey.html.ep') diff --git a/templates/journey.html.ep b/templates/journey.html.ep index ee5d008..6ed204f 100644 --- a/templates/journey.html.ep +++ b/templates/journey.html.ep @@ -250,7 +250,7 @@ data-url="<%= url_for('public_journey', name => current_user()->{name}, id => $journey->{id} )->to_abs->scheme('https'); %>" % } % else { - data-url="<%= url_for('public_journey', name => current_user()->{name}, id => $journey->{id} )->to_abs->scheme('https'); %>?token=<%= $journey->{from_eva} %>-<%= $journey->{checkin_ts} %>-<%= $journey->{sched_dep_ts} %>" + data-url="<%= url_for('public_journey', name => current_user()->{name}, id => $journey->{id} )->to_abs->scheme('https'); %>?token=<%= $journey->{from_eva} %>-<%= $journey->{checkin_ts} % 337 %>-<%= $journey->{sched_dep_ts} %>" % } data-text="<%= stash('share_text') %>" > -- cgit v1.2.3