Mercurial > p > roundup > code
comparison roundup/cgi/actions.py @ 5256:3639f4b55936
Issue2550716 Email address displayed after password reset request (fix)
Change the message displayed upon password reset using an account name
to no longer expose the email address. Password reset triggered using
an email address will still display the user supplied email address.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sat, 26 Aug 2017 20:48:57 -0400 |
| parents | 28b6bfd303c3 2d61e39b89c8 |
| children | 62de601bdf6f |
comparison
equal
deleted
inserted
replaced
| 5255:1c01d5ef9ba3 | 5256:3639f4b55936 |
|---|---|
| 980 You should then receive another email with the new password. | 980 You should then receive another email with the new password. |
| 981 '''%{'name': name, 'tracker': tracker_name, 'url': self.base, 'otk': otk} | 981 '''%{'name': name, 'tracker': tracker_name, 'url': self.base, 'otk': otk} |
| 982 if not self.client.standard_message([address], subject, body): | 982 if not self.client.standard_message([address], subject, body): |
| 983 return | 983 return |
| 984 | 984 |
| 985 self.client.add_ok_message(self._('Email sent to %s') % address) | 985 if 'username' in self.form: |
| 986 self.client.add_ok_message(self._('Email sent to primary notification address for %s.') % name) | |
| 987 else: | |
| 988 self.client.add_ok_message(self._('Email sent to %s.') % address) | |
| 986 | 989 |
| 987 class RegoCommon(Action): | 990 class RegoCommon(Action): |
| 988 def finishRego(self): | 991 def finishRego(self): |
| 989 # log the new user in | 992 # log the new user in |
| 990 self.client.userid = self.userid | 993 self.client.userid = self.userid |