colymba / silverstripe-restfulapi

SilverStripe RESTful API with a default JSON serializer.
BSD 3-Clause "New" or "Revised" License
64 stars 34 forks source link

Lost pass disclosure fix #89

Closed UndefinedOffset closed 6 years ago

UndefinedOffset commented 6 years ago

As discussed in #88 this pull request makes the response from lostPassword generic regardless whether the account exists or not.