User can (attempt to) change mail address to non-whitelisted domain

Case:

  • user changes mail address to a domain that is not whitelisted
  • user gets mail to confirm that address
  • clicking that link results in error There was an error changing your email address. Perhaps the address is already in use?

Apart from the fact that the error message doesn’t help at all, why was the address accepted in the first place?

Although the change is not accepted - hence the whitelisting works - it’s confusing for the user.

3 Likes

Hmm yes we should improve this @techapj.

1 Like

Okay, fixed via

https://github.com/discourse/discourse/commit/380764dc92dd5e97db6dec5430bae2f517373748

Thanks for reporting this issue @Sander78! :+1:

4 Likes