When this module isn't enabled, Drupal core will straight refuse to send a reset email to blocked user.

That's no longer the case on this module is enabled, because username_enumeration_prevention_pass_validate only checks $account && $account->id(), not the status.

CommentFileSizeAuthor
#2 2865741-2-Prevent-mail-from-being-sent-t.patch904 bytesDeFr

Comments

DeFr created an issue. See original summary.

DeFr’s picture

DeFr commented
Status: Active » Needs review
StatusFileSize
new 2865741-2-Prevent-mail-from-being-sent-t.patch904 bytes

Patch fixing that omission.

  • nicksanta committed aa84a55 on 8.x-1.x 
    [#2865741] Moved user feedback to submit handler.
  • nicksanta committed bb091bd on 8.x-1.x authored by DeFr
    Issue #2865741 by DeFr: Mail sent for blocked user
nicksanta’s picture

nicksanta commented
Status: Needs review » Fixed

Committed to 8.x-1.x branch - thanks for your contribution!

https://github.com/nicksantamaria/drupal-username_enumeration_prevention...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.