taiga
/
taiga-back
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fixing information disclosure when resetting password

remotes/origin/enhancement/email-actions
Alejandro Alonso 2015-05-05 19:52:23 +02:00
parent 9c1c582577
commit c2563125e5
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
taiga/users/api.py
View File

@ -100,8 +100,7 @@ class UsersViewSet(ModelCrudViewSet):
email = mbuilder.password_recovery(user.email, {"user": user}) email = mbuilder.password_recovery(user.email, {"user": user})
email.send() email.send()
return response.Ok({"detail": _("Mail sended successful!"), return response.Ok({"detail": _("Mail sended successful!")})
"email": user.email})
@list_route(methods=["POST"]) @list_route(methods=["POST"])
def change_password_from_recovery(self, request, pk=None): def change_password_from_recovery(self, request, pk=None):