dont use notActiveUser

weseek · Oct 17, 2024 · 84714a8 · 84714a8
1 parent eb86b32
commit 84714a8
Show file tree

Hide file tree

Showing 5 changed files with 2 additions and 53 deletions.
diff --git a/apps/app/resource/locales/en_US/notifications/notActiveUser.ejs b/apps/app/resource/locales/en_US/notifications/notActiveUser.ejs
diff --git a/apps/app/resource/locales/fr_FR/notifications/notActiveUser.ejs b/apps/app/resource/locales/fr_FR/notifications/notActiveUser.ejs
diff --git a/apps/app/resource/locales/ja_JP/notifications/notActiveUser.ejs b/apps/app/resource/locales/ja_JP/notifications/notActiveUser.ejs
diff --git a/apps/app/resource/locales/zh_CN/notifications/notActiveUser.ejs b/apps/app/resource/locales/zh_CN/notifications/notActiveUser.ejs
diff --git a/apps/app/src/server/routes/apiv3/forgot-password.js b/apps/app/src/server/routes/apiv3/forgot-password.js
@@ -79,7 +79,8 @@ module.exports = (crowi) => {
 
       // when the user is not found or active
       if (user == null || user.status !== 2) {
-        await sendPasswordResetEmail('notActiveUser', locale, email, appUrl);
+        // Do not send emails to non GROWI user
+        // For security reason, do not use error messages like "Email does not exist"
         return res.apiv3();
       }