diff --git a/app/controllers/account_controller.rb b/app/controllers/account_controller.rb index 749fc8f64..77a374233 100644 --- a/app/controllers/account_controller.rb +++ b/app/controllers/account_controller.rb @@ -103,7 +103,9 @@ class AccountController < ApplicationController user = User.find_by_mail(email) # user not found unless user - flash.now[:error] = l(:notice_account_unknown_email) + # an error that indicates the email is invalid should not be + # displayed to prevent email harvesting + flash[:notice] = l(:notice_account_lost_email_sent) return end unless user.active? diff --git a/config/locales/en.yml b/config/locales/en.yml index 74067d42c..3e68f22b9 100644 --- a/config/locales/en.yml +++ b/config/locales/en.yml @@ -156,7 +156,6 @@ en: notice_account_password_updated: Password was successfully updated. notice_account_wrong_password: Wrong password notice_account_register_done: Account was successfully created. An email containing the instructions to activate your account was sent to %{email}. - notice_account_unknown_email: Unknown user. notice_account_not_activated_yet: You haven't activated your account yet. If you want to receive a new activation email, please click this link. notice_account_locked: Your account is locked. notice_can_t_change_password: This account uses an external authentication source. Impossible to change the password.