[openstreetmap-website] [security issue] E-mail address exposed (#1010)

[Midgard]

It is possible to get the e-mail address of any user by visiting http://www.openstreetmap.org/user/#display_name/confirm/resend.

The OSM user will be sent a confirmation mail and the page will show their email address.

---
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1010
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20150720/ffeb9447/attachment.html>