In a class-based view, form_valid is only called when the form has been
validated. Moreover, we only call the dispatch parent class if the reset
link has been validated. Checking it again in form_valid is not needed.

Baptiste Beauplat authored Sep 19, 2020 and Baptiste Beauplat committed Sep 19, 2020

This is done by looking at how fast the registration form is submitted
and how many time an IP can use registration per day.

* Add tests for sponsor signup
* Add tests for account activation
* Remove id parameter validation in RegisterController().activate(id) obsoleted
  by new routing system

* Change copyright header
* Remove PPA controller
* Remove static HTML hooks we don't use anyway

* Change copyright header
* Remove PPA controller
* Remove static HTML hooks we don't use anyway

Fix a nasty CSRF vulnerability. An attacker could be phishing account data by spoofed URLs from our legit sender relay

Fix a nasty CSRF vulnerability. An attacker could be phishing account data by spoofed URLs from our legit sender relay

Fix a nasty CSRF vulnerability. An attacker could be phishing account data by spoofed URLs from our legit sender relay