https://bugzilla.wikimedia.org/show_bug.cgi?id=29135
[email protected] changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #7 from [email protected] 2011-06-08 07:47:42 UTC --- (In reply to comment #6) > * Problem to be solved: > > User A can trigger a password-mail to other user B by accessing (simply by > accessing Special:PasswordReset and inputting username B into the field) Is this really a problem? The user could just log out and do the same thing. > When logged-in users visit Special:PasswordReset, > they see an _emtpy_ input field for entering a username. If it were pre-filled with the user's username, it would be consistent with the current behavior of Special:UserLogin. (I never figured out whether that behavior was intentional or just a quirk.) -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
