Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not leak existence of e-mail addresses during login attempt in French translation #9375

Merged
merged 1 commit into from
Nov 27, 2018

Conversation

mkljczk
Copy link
Contributor

@mkljczk mkljczk commented Nov 27, 2018

Fix #9374

@Gargron Gargron added the security Security issues and fixes, vulnerabilities label Nov 27, 2018
@Gargron Gargron changed the title security/l10n [fr] do not leak registered e-mail addresses Do not leak existence of e-mail addresses during login attempt in French translation Nov 27, 2018
@Gargron Gargron merged commit 6bdc986 into mastodon:master Nov 27, 2018
@mkljczk mkljczk deleted the patch-3 branch November 27, 2018 15:44
@Berbe
Copy link

Berbe commented Nov 27, 2018

Wow that is unexpected: how are translations able to tell one case (non-existent email) from the other (invalid credentials)?
Sounds like a design flaw.

hiyuki2578 pushed a commit to ProjectMyosotis/mastodon that referenced this pull request Oct 2, 2019
…9375)

Do not leak existence of e-mail addresses during login attempt in French translation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Security issues and fixes, vulnerabilities
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants