Mercurial > kallithea
comparison docs/index.rst @ 5171:1e079752b756 stable
privacy: on password reset, don't tell strangers if email is valid or not
Password reset form might be used to check if users with specific email
addresses have accounts in the system by requesting their password to be
reset. It's probably not a good idea to give this sort of information to
complete strangers.
author | Andrew Shadura <andrew@shadura.me> |
---|---|
date | Sat, 16 May 2015 16:37:17 +0200 |
parents | beb4cbf30d00 |
children | 154becd92f40 |
comparison
equal
deleted
inserted
replaced
5170:3e1afbd6055f | 5171:1e079752b756 |
---|