Problem/Motivation

As reported by klausi :

When a user edits their account then the email address will be saved as user name. So the email address will again be leaked through the username. Looks like amazon_like_login_form_user_profile_form_validate() is wrong?

Proposed resolution

Remove the amazon_like_login_form_user_profile_form_validate() as it is not needed according to the revised working of the module.

Remaining tasks

None

User interface changes

None

API changes

None

Data model changes

None

CommentFileSizeAuthor
#2 Fix_security_issue-2768063-2.patch2.1 KBtaherpro

Comments

taherj created an issue. See original summary.

taherpro’s picture

taherpro commented
StatusFileSize
new Fix_security_issue-2768063-2.patch2.1 KB

Adding a patch to fix the above mentioned issue, also removing unwanted check_plain() used.

  • neeravbm committed a77f0c1 on 7.x-1.x authored by taherj 
    Issue #2768063 by taherj: Fix security issue when user edits profile
taherpro’s picture

taherpro commented
Status: Active » Needs review
neeravbm’s picture

neeravbm commented
Status: Needs review » Fixed

Fixed and committed. Thank you!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.