vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

In password recovery, don't reveal whether an e-mail address is valid (unless it is an org's e-mail address)

Browse source
This commit is contained in:
Joseph Schorr 2017-12-06 14:07:38 -05:00
parent 4a5626e64b
commit 927d469db0
3 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
static/directives/recovery-form.html
View file

@ -5,7 +5,7 @@
</div>
<div ng-show="!sendingRecovery">
<div class="co-alert co-alert-success" ng-show="sent.status == 'sent'">
Account recovery email was sent to {{ recovery.email }}.
Instructions on how to reset your password have been sent to {{ recovery.email }}. If you do not receive the email, please try again shortly.
</div>
<div class="co-alert co-alert-danger" ng-show="invalidRecovery">{{ errorMessage }}</div>
<div class="co-alert co-alert-info" ng-show="sent.status == 'org'">