SECURITY: GitHub returns unvalidated emails

2014-03-26 10:55:36 +11:00 · 2014-03-26 10:55:36 +11:00 · 35ee341122
parent 86244e3a4b
commit 35ee341122
1 changed files with 1 additions and 1 deletions
--- a/lib/auth/github_authenticator.rb
+++ b/lib/auth/github_authenticator.rb
@ -32,7 +32,7 @@ class Auth::GithubAuthenticator < Auth::Authenticator
    end

    result.user = user
-    result.email_valid = true
+    result.email_valid = false

    result
  end