Bugzilla misconfigured

Kevin Bullock kbullock+mercurial at ringworld.org
Fri Jul 15 13:02:36 EDT 2016


> On Jul 15, 2016, at 10:58, Bryan O'Sullivan <bos at serpentine.com> wrote:
> 
> I've been trying to reset my password via the link on the landing page of bz.mercurial-scm.org, and every attempt to do so results in landing at token.cgi with a message "You submitted changes to token.cgi with an invalid token, which may indicate that someone tried to abuse you, for instance by making you click on a URL which redirected you here without your consent."

I just tried it and it worked... got an email with a url of the form:

https://bz.mercurial-scm.org/token.cgi?t=...&a=cfmpw

and clicked it, set a new password, and did not get the error message.

From the logs it looks like the link you clicked was of a different form. Not sure where that came from...?

pacem in terris / мир / शान्ति / ‎‫سَلاَم‬ / 平和
Kevin R. Bullock



More information about the Mercurial-devel mailing list