Orchard Core is an open-source modular and multi-tenant application framework built with ASP.NET Core, and a content management system (CMS) built on top of that framework.
I noticed that ResetPasswordController.ResetPassword doesn't send a confirmation email. Usually you get an email that says something like "Your password has been changed. If you requested this change then no further action is needed. If you did not request this change..."
Maybe AccountController.ChangePassword should do the same.
I noticed that ResetPasswordController.ResetPassword doesn't send a confirmation email. Usually you get an email that says something like "Your password has been changed. If you requested this change then no further action is needed. If you did not request this change..."
Maybe
AccountController.ChangePassword
should do the same.