From 6b3f76e4ee153eba8ad55e9d4717ef3c6ca62f7b Mon Sep 17 00:00:00 2001
From: the-djmaze <>
Date: Tue, 9 Jan 2024 15:56:35 +0100
Subject: [PATCH] Login form use `method="POST"` to prevent uri exposure when
 javascript fails

---
 snappymail/v/0.0.0/app/templates/Views/Admin/AdminLogin.html | 2 +-
 snappymail/v/0.0.0/app/templates/Views/User/Login.html       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/snappymail/v/0.0.0/app/templates/Views/Admin/AdminLogin.html b/snappymail/v/0.0.0/app/templates/Views/Admin/AdminLogin.html
index 6c081d8ce..42c04c95f 100644
--- a/snappymail/v/0.0.0/app/templates/Views/Admin/AdminLogin.html
+++ b/snappymail/v/0.0.0/app/templates/Views/Admin/AdminLogin.html
@@ -3,7 +3,7 @@
 	<a href="#" class="close" data-bind="click: hideError">×</a>
 	<span data-bind="text: submitError"></span>
 </div>
-<form action="#/" spellcheck="false" data-bind="submit: submitForm, css: {'errorAnimated': formError, 'submitting': submitRequest()}">
+<form action="#/" spellcheck="false" method="POST" data-bind="submit: submitForm, css: {'errorAnimated': formError, 'submitting': submitRequest()}">
 	<div class="controls" data-bind="css: {'error': loginError}">
 		<span class="fontastic">👤</span>
 		<input name="Login" required="" type="text" class="input-block-level"
diff --git a/snappymail/v/0.0.0/app/templates/Views/User/Login.html b/snappymail/v/0.0.0/app/templates/Views/User/Login.html
index aed43eaa0..f5e626ef9 100644
--- a/snappymail/v/0.0.0/app/templates/Views/User/Login.html
+++ b/snappymail/v/0.0.0/app/templates/Views/User/Login.html
@@ -7,7 +7,7 @@
 		<!-- ko text: submitErrorAdditional --><!-- /ko -->
 	</p>
 </div>
-<form action="#/"  spellcheck="false"
+<form action="#/"  spellcheck="false" method="POST"
 	data-bind="submit: submitForm, css: {'errorAnimated': formError, 'submitting': submitRequest()}">
 	<div class="controls" data-bind="css: {'error': emailError}">
 		<span class="fontastic">✉</span>