discourse/app
Sam b6c3e9aa03
FEATURE: hide_email_address_taken forces use of email in forgot password form (#15362)
* FEATURE: hide_email_address_taken forces use of email in forgot password form

This strengthens this site setting which is meant to be used to harden sites
that are experiencing abuse on forgot password routes.

Previously we would only deny letting people know if forgot password worked on not
New change also bans usage of username for forgot password when enabled
2021-12-20 12:54:10 +11:00
..
assets FEATURE: hide_email_address_taken forces use of email in forgot password form (#15362) 2021-12-20 12:54:10 +11:00
controllers FEATURE: hide_email_address_taken forces use of email in forgot password form (#15362) 2021-12-20 12:54:10 +11:00
helpers SECURITY: Remove ember-cli specific response from application routes (#15155) 2021-12-01 16:10:40 +00:00
jobs FEATURE: Scheduled problem checks for admin dashboard (#15327) 2021-12-20 09:59:11 +10:00
mailers DEV: Hash tokens stored from email_tokens (#14493) 2021-11-25 09:34:39 +02:00
models FEATURE: Scheduled problem checks for admin dashboard (#15327) 2021-12-20 09:59:11 +10:00
serializers FEATURE: Experimental support for group membership via google auth (#14835) 2021-12-09 12:30:27 +00:00
services FIX: Notify group members when someone quotes or replies to their post. (#15295) 2021-12-15 09:07:39 -03:00
views FEATURE: Allow to modify topic-backed static pages (#15324) 2021-12-16 04:24:11 +01:00