I searched for email@example.com in mozillians.org and it gave me Gavin Sharp. He is actually firstname.lastname@example.org. This would lead to user error. I don't think search should work like this and I wanted to get an "invite" link. Marking private, since I'm putting email addresses in here.
Great catch, thanks for filing this Austin! Suggested fix: - If the query is an email address, only display results that match the email address field and no other fields. - In the comment 0 example, once the fix is applied, searching for email@example.com when there is no Mozillian with that email address in the database would return the message "Sorry, we cannot find a group or person related to 'firstname.lastname@example.org'".
Not a security bug. Changing flags.