[issue2551157] Change password reset to not send password via email
John Rouillard <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.devel |
|---|---|
| Message-ID | <[email protected]> |
New submission from John Rouillard: On a password reset, we send the new password to the user via email. https://cheatsheetseries.owasp.org/cheatsheets/Forgot_Password_Cheat_Sheet .html recommends making the unique URL display a page that lets the user reset the password. See if we can implement this. ---------- messages: 7333 nosy: rouilj severity: normal status: new title: Change password reset to not send password via email type: security _________________________________________________ Roundup tracker <[email protected]> <https://issues.roundup-tracker.org/issue2551157> _________________________________________________