Password reset form should not show email associated with the account
Open
- Dominant language
- Haskell
- Stars
- 2.3k
- Forks
- 231
- PR merge metrics
- No merged PRs in 30d
Description
The password reset form shows the email address. This can be used to harvest email addresses.A better solution would be to just show the domain name. Eg: user joesmith is registered with joesmith@example.com.
The reset page should say "mail has been sent to your email ending with @example.com" or some such..
Google Code Info:
Issue #: 105
Author: pradeep....@gmail.com
Created On: 2010-06-21T15:47:04.000Z
Closed On:
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.