Discourse Meta
Password reset confirm message should discourage social engineering
feature
JammyDodger
Closed
August 4, 2023, 8:03am
11
Closed in favour of
Email enumeration vulnerability on "Password Reset" dialogue
show post in topic
Related Topics
Topic
Replies
Views
Activity
Received password reset email though I didn’t request one?
support
15
2359
November 28, 2023
Password reset email leads to "Oops! That page doesn’t exist or is private."
support
3
569
September 30, 2021
Is it possible to hash the email database?
feature
23
1138
October 10, 2018
Do not leak emails on password reset
support
4
544
January 14, 2021
Why Doesn't Discourse Have a "Confirm Password" Section During The Signup Process?
feature
5
1280
January 9, 2018