# Preocupação de Segurança/Privacidade: E-mail exposto na URL de redirecionamento do provedor DiscourseConnect

**URL:** https://meta.discourse.org/t/security-privacy-concern-email-exposed-in-discourseconnect-provider-redirect-url/397980
**Category:** Feature
**Tags:** pr-welcome
**Created:** [Março 9, 2026, 6:05pm UTC](https://meta.discourse.org/t/security-privacy-concern-email-exposed-in-discourseconnect-provider-redirect-url/397980 "2026-03-09T18:05:25Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![JACK\_ZHANG](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jack_zhang/32/492350_2.png) [@JACK\_ZHANG](https://meta.discourse.org/u/JACK_ZHANG)
#### Post date: [Maio 5, 2026, 8:43am UTC](https://meta.discourse.org/t/security-privacy-concern-email-exposed-in-discourseconnect-provider-redirect-url/397980/6 "2026-05-05T08:43:47Z")

</div>

Aqui está o link para o PR

> <https://github.com/discourse/discourse/pull/38382>
>
> Adds a new site setting \`discourse\_connect\_provider\_provides\_email\` (default: tr…ue) to control whether user email is included in the SSO redirect URL. This maintains backward compatibility while allowing admins to disable email exposure for privacy reasons.
> 
> See: https://meta.discourse.org/t/security-privacy-concern-email-exposed-in-discourseconnect-provider-redirect-url/397980

---

_[View the full topic](https://meta.discourse.org/t/security-privacy-concern-email-exposed-in-discourseconnect-provider-redirect-url/397980)._