b6c3e9aa03
* FEATURE: hide_email_address_taken forces use of email in forgot password form This strengthens this site setting which is meant to be used to harden sites that are experiencing abuse on forgot password routes. Previously we would only deny letting people know if forgot password worked on not New change also bans usage of username for forgot password when enabled |
||
|---|---|---|
| .. | ||
| images | ||
| javascripts | ||
| stylesheets | ||