lee/puter
1
0
Fork 0
mirror of https://github.com/HeyPuter/puter.git synced 2026-09-22 21:26:04 +00:00
Code Issues Actions 9 Packages Projects Releases Wiki Activity

Merge pull request #346 from youngsiiimba/main

Browse Source 
fix(security): Prevent email enumeration
This commit is contained in:
Nariman Jelveh
2024-04-25 14:59:56 -07:00
committed by GitHub
parent eb166a67a9 3cce0e88df
commit 928dd90f61
1 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/backend/src/routers/send-pass-recovery-email.js
+2 -5
View File
@@ -114,10 +114,7 @@ router.post('/send-pass-recovery-email', express.json(), body_parser_error_handl
});
// Send response
if(req.body.username)
return res.send({message: `Password recovery sent to the email associated with <strong>${user.username}</strong>. Please check your email for instructions on how to reset your password.`});
else
return res.send({message: `Password recovery email sent to <strong>${user.email}</strong>. Please check your email for instructions on how to reset your password.`});
return res.send({message: `If the email address exists in our database. A recovery email will be sent to <strong>${user.email}</strong>`});
}catch(e){
console.log(e)
@@ -126,4 +123,4 @@ router.post('/send-pass-recovery-email', express.json(), body_parser_error_handl
})
module.exports = router
module.exports = router