🔒 Don't disclose if account exists when resetting passwords, closes #358

This commit is contained in:
Dane Everitt 2017-03-30 17:44:20 -04:00
parent 9106971565
commit 1f0e95790a
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
5 changed files with 233 additions and 125 deletions

View file

@ -12,6 +12,7 @@ This project follows [Semantic Versioning](http://semver.org) guidelines.
### Changed
* Subuser permissions are now stored in `Permission::list()` to make views way cleaner and make adding to views significantly cleaner.
* `[pre.7]` — Sidebar for file manager now is a single link rather than a dropdown.
* Attempting to reset a password for an account that does not exist no longer returns an error, rather it displays a success message. Failed resets trigger a `Pterodactyl\Events\Auth\FailedPasswordReset` event that can be caught if needed to perform other actions.
## v0.6.0-pre.7 (Courageous Carniadactylus)
### Fixed