Fixing information disclosure when resetting password

2015-05-05 19:52:23 +02:00 · 2015-05-05 19:52:23 +02:00 · 2b469c560c
parent 9962ab12f9
commit 2b469c560c
1 changed files with 1 additions and 2 deletions
--- a/taiga/users/api.py
+++ b/taiga/users/api.py
@ -118,8 +118,7 @@ class UsersViewSet(ModelCrudViewSet):
        email = mbuilder.password_recovery(user, {"user": user})
        email.send()

-        return response.Ok({"detail": _("Mail sended successful!"),
-                            "email": user.email})
+        return response.Ok({"detail": _("Mail sended successful!")})

    @list_route(methods=["POST"])
    def change_password_from_recovery(self, request, pk=None):