Public/pics
2
2 Fork 3
Code Issues 5 Pull Requests 1 Releases Wiki Activity

Fix (security): don't accept empty reset keys for users with no password reset pending #57

Merged
Aaron merged 1 commits from yorick/pics:fix-passwordreset into master 2026-10-24 18:05:45 +02:00
Conversation 0 Commits 1 Files Changed 1
+8 -1
yorick commented 2026-10-24 18:03:22 +02:00
Member
Copy link
Copy source

Currently, it's possible to reset passwords for users that do not have any password reset by providing an empty key, which would match '' or NULL.

Currently, it's possible to reset passwords for users that do not have any password reset by providing an empty key, which would match '' or NULL.
yorick added 1 commit 2026-10-24 18:03:22 +02:00
Fix (security): don't accept empty reset keys for users with no password reset pending aca44ddd5c 
Currently, it's possible to reset passwords for users that do not have any password reset by providing an empty key, which would match '' or NULL.
Aaron approved these changes 2026-10-24 18:05:24 +02:00
Aaron left a comment
Member
Copy link
Copy source

Goed gevonden!

Goed gevonden!
Aaron merged commit 1eb0df6aaa into master 2026-10-24 18:05:45 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Aaron
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
Aaron (Aaron van Geffen) minnozz (Bart Schuurmans) mrngm Roflin yorick
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Public/pics#57