Closed Bug 1677419 Opened 4 years ago Closed 3 years ago

Token cancellation and verification should take an extra step to confirm

Categories

(bugzilla.mozilla.org :: General, defect)

defect

Tracking

()

RESOLVED FIXED

People

(Reporter: glob, Assigned: dkl)

Details

Attachments

(1 file)

When a user changes their email address they are sent two emails: one for confirmation and one for cancellation.

The Outlook Web Mail client visits every URL in an email to generate a preview.

Just visiting the cancellation link will cancel the request, resulting in users using this email client being unable to change their email address.

A simple fix is to have a confirmation button on the token pages.

Attached file GitHub Pull Request
Assignee: nobody → dkl
Status: NEW → ASSIGNED

Merged to master.

Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: