external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2026-10-28 06:29:53 +01:00
Code Issues Releases Wiki Activity

hotfix merge #772 - yodax/generic-login-message

Browse Source 
Make control panel login failed messages generic - don't reveal if an email address has an account on the system.
This commit is contained in:
Joshua Tauberer
2016-03-31 10:46:38 -04:00
parent 703e6795e8
commit 3843f63416
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+1
View File
@@ -11,6 +11,7 @@ Mail:
Control panel:
* Prevent click-jacking of the management interface by adding HTTP headers.
* Failed login no longer reveals whether an account exists on the system.
Setup: