passwordauth: avoid userinfo forgery via repeated email parameter

[git.ikiwiki.info.git] / templates / openid-selector.tmpl

diff --git a/templates/openid-selector.tmpl b/templates/openid-selector.tmpl
index b4d0e314f5ad0cd2997cafc8a138c5be892a715d..0fd833042db4d0e692873bfe4b8c5a9bf974a06d 100644 (file)
--- a/templates/openid-selector.tmpl
+++ b/templates/openid-selector.tmpl
@@ -1,4 +1,4 @@
-<script type="text/javascript" src="ikiwiki/openid/jquery.js"></script>
+<script type="text/javascript" src="ikiwiki/jquery.min.js"></script>
 <script type="text/javascript" src="ikiwiki/openid/openid-jquery.js"></script>
 <script type="text/javascript">
 $(document).ready(function() {
@@ -12,7 +12,9 @@ $(document).ready(function() {
 
 <form action="<TMPL_VAR CGIURL>" method="get" id="openid_form">
        <fieldset>
-               <legend>Select your account provider</legend>
+               <script>
+               $('fieldset').append("<legend>Select your account provider</legend>");
+               </script>
                
                <input type="hidden" name="do" value="signin" />
                <input type="hidden" name="action" value="verify" />
@@ -20,7 +22,8 @@ $(document).ready(function() {
                        <div id="openid_btns"></div>
                </div>
                <div id="openid_input_area">
-                       <input id="openid_identifier" name="openid_identifier" type="text" value="<TMPL_VAR OPENID_URL>"/>
+                       <label for="openid_identifier" class="block">Enter your OpenID:</label>
+                       <input id="openid_identifier" name="openid_identifier" type="text" value="<TMPL_VAR ESCAPE=HTML OPENID_URL>"/>
                        <input id="openid_submit" type="submit" value="Login"/>
                </div>
                <TMPL_IF OPENID_ERROR>
@@ -33,7 +36,7 @@ $(document).ready(function() {
 <TMPL_IF NONOPENIDFORM>
 <br />
 <noscript>
-<h2>Local Account:</h2>
+<h2>Other:</h2>
 </noscript>
 </TMPL_IF>
 <TMPL_VAR NONOPENIDFORM>