Gary Merrill writes:

 > Personal consultation and observation appears to be the only
 > approach here that will be successful.

If the security implications are acceptable (which I think they are),
you can also provide the user with a precomposed URL that they can put
in their bookmarks list, as Mark mentioned.

We don't provide that kind of thing ourselves because it is a security
risk, and also in some contexts a legal risk (some list owners are
subject to legal requirement to get confirmation for subscription, for
example).

Aside: in this case it's not necessary AFAIK, but in cases where a
CSRF token or similar dynamically generated security token might be
involved, it should be possible to use Java script to acquire and
return the token.

------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to