1516165 - Email addresses should be hidden or scrambled for not logged in users

Status: RESOLVED FIXED

(Webtools Graveyard :: Pontoon, enhancement, P3)

Description

[Francesco Lodolo [:flod]]

Looks like we show plain email addresses in the profile page, even if a user is not logged in.
https://pontoon.mozilla.org/contributors/mZuzEFP7EcmgBBTbvtgJP2LFFTY/

We should likely completely hide that field.

Comment 1

[Matjaz Horvat [:mathjazz]]

We can do that, but note that we show email addresses in a few other places publicly if the user doesn't set its name.

For example:
- on the profile page, in the <title> attribute
- on the /contributors pages
- in the History tab

In none of these cases we have an alternative user identifier to show.

Are you OK with only removing the email address from the profile page, under the avatar?

Comment 2

[Francesco Lodolo [:flod]]

(In reply to Matjaz Horvat [:mathjazz] from comment #1)
> Are you OK with only removing the email address from the profile page, under
> the avatar?

Yes, because in those cases we can tell them the solution is to set a username in their profile. The only place where they currently can't do anything is the profile.

Comment 3

[Matjaz Horvat [:mathjazz]]

Good point.

Comment 4

[[github robot]]

Commit pushed to master at https://github.com/mozilla/pontoon

https://github.com/mozilla/pontoon/commit/3d4ad8cfc546c68b0e3fcfeea1b35e2c7acb4508
Fix bug 1516165: Hide email address from profile page for unauthenticated users (#1155)