🔒 Don't disclose if account exists when resetting passwords, closes #358
This commit is contained in:
parent
9106971565
commit
1f0e95790a
5 changed files with 233 additions and 125 deletions
|
@ -12,6 +12,7 @@ This project follows [Semantic Versioning](http://semver.org) guidelines.
|
|||
### Changed
|
||||
* Subuser permissions are now stored in `Permission::list()` to make views way cleaner and make adding to views significantly cleaner.
|
||||
* `[pre.7]` — Sidebar for file manager now is a single link rather than a dropdown.
|
||||
* Attempting to reset a password for an account that does not exist no longer returns an error, rather it displays a success message. Failed resets trigger a `Pterodactyl\Events\Auth\FailedPasswordReset` event that can be caught if needed to perform other actions.
|
||||
|
||||
## v0.6.0-pre.7 (Courageous Carniadactylus)
|
||||
### Fixed
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue