Files
@ 1e079752b756
Branch filter:
Location: kallithea/MANIFEST.in - annotation
1e079752b756
856 B
text/plain
privacy: on password reset, don't tell strangers if email is valid or not
Password reset form might be used to check if users with specific email
addresses have accounts in the system by requesting their password to be
reset. It's probably not a good idea to give this sort of information to
complete strangers.
Password reset form might be used to check if users with specific email
addresses have accounts in the system by requesting their password to be
reset. It's probably not a good idea to give this sort of information to
complete strangers.