discourse/app/views/users/activate_account.html.erb

<div id='simple-container'>
    <h2><%= t 'activation.welcome_to', site_name: SiteSetting.title %></h2>
    <br/>
    <button class='btn btn-primary' id='activate-account-button'><%= t 'activation.action' %></button>

    <%= form_tag(perform_activate_account_path, method: :put, id: 'activate-account-form') do %>
      <%= hidden_field_tag 'password_confirmation' %>
      <%= hidden_field_tag 'challenge' %>
    <% end %>
</div>

<%- content_for(:no_ember_head) do %>
  <%= preload_script "ember_jquery" %>
  <%= preload_script "vendor" %>
  <%= render_google_universal_analytics_code %>
  <%= tag.meta id: 'data-activate-account', data: { path: path('/session/hp') } %>
<%- end %>

<%= preload_script "activate-account" %>
Initial release of Discourse 2013-02-06 03:16:51 +08:00			`<div id='simple-container'>`
			`<h2><%= t 'activation.welcome_to', site_name: SiteSetting.title %></h2>`
FEATURE: Require Javascript to activate an account via email link 2014-07-15 00:25:42 +08:00			`<br/>`
make the activate account button a btn-primary 2016-07-14 18:40:50 +08:00			`<button class='btn btn-primary' id='activate-account-button'><%= t 'activation.action' %></button>`
FEATURE: Require Javascript to activate an account via email link 2014-07-15 00:25:42 +08:00
			`<%= form_tag(perform_activate_account_path, method: :put, id: 'activate-account-form') do %>`
Check honeypot/challenge value on activation too 2014-07-16 02:07:19 +08:00			`<%= hidden_field_tag 'password_confirmation' %>`
			`<%= hidden_field_tag 'challenge' %>`
Initial release of Discourse 2013-02-06 03:16:51 +08:00			`<% end %>`
FEATURE: Require Javascript to activate an account via email link 2014-07-15 00:25:42 +08:00			`</div>`
remove trailing whitespaces :heart: 2013-02-26 00:42:20 +08:00
Rename `no_js` layout to `no_ember` While sometimes `no_js` was used for visitors without js (for example disabling it on your browser) it was also used for some pages that were disabled to JS capable browsers, including the 404 page. Even worse, sometimes it was used on pages that had Javascript, such as our `/activate-account` route. It has been renamed to `no_ember` to indicate what it really is, a layout for the site that doesn't load our Ember.js application. 2015-01-16 04:56:53 +08:00			`<%- content_for(:no_ember_head) do %>`
missing spots 2017-04-18 00:30:20 +08:00			`<%= preload_script "ember_jquery" %>`
			`<%= preload_script "vendor" %>`
FEATURE: add Google Analytics code to more user pages 2016-04-02 03:59:08 +08:00			`<%= render_google_universal_analytics_code %>`
FIX: move hp request from /users to /token (#10795) `hp` is a valid username and we should not prevent users from registering it. 2020-10-02 07:01:40 +08:00			`<%= tag.meta id: 'data-activate-account', data: { path: path('/session/hp') } %>`
Check honeypot/challenge value on activation too 2014-07-16 02:07:19 +08:00			`<%- end %>`

CSP - extract all other inline JavaScripts (#6528) * wizard page inline js * print topic inline js * drop JS for preventing double submission this is the default behavior with Rails' UJS `disable_with` helper * omniauth complete redirect JS * account activate inline js 2018-10-25 21:52:01 +08:00			`<%= preload_script "activate-account" %>`