Re: [PATCH] privacy: on password reset, don't tell strangers if email is valid or not

Hello, On Sat, 16 May 2015 16:37:42 +0200 Andrew Shadura wrote: > Password reset form might be used to check if users with specific > email addresses have accounts in the system by requesting their > password to be reset. It's probably not a good idea to give this sort > of information to comple

[PATCH] privacy: on password reset, don't tell strangers if email is valid or not

# HG changeset patch # User Andrew Shadura # Date 1431787037 -7200 # Sat May 16 16:37:17 2015 +0200 # Node ID 388a6eada55925cb55cd2368e47a6115d833b4c1 # Parent 93de511e84fe940786acf468789a77daed83a461 privacy: on password reset, don't tell strangers if email is valid or not Password reset f