search

sonata-project / SonataUserBundle

Symfony SonataUserBundle
https://docs.sonata-project.org/projects/SonataUserBundle
MIT License
341 stars 487 forks source link

Avoid Username/Email is passed as clear GET Parameter to CheckEmailAction on password reset process #1695

Closed VincentLanglet closed 2 months ago

VincentLanglet commented 2 months ago

Subject

Avoid Username/Email is passed as clear GET Parameter to CheckEmailAction on password reset process as discussed in https://github.com/sonata-project/SonataUserBundle/issues/1692

I am targeting this branch, because this fixes an privacy issue and doesn't break anything.

Closes #1692.

Changelog

### Removed
- After requesting new passwort the username isn't passed to CheckEmailAction anymode