[openstreetmap/openstreetmap-website] [Security] XXXX xxxxxx that can lead to account takeover (#3089)

[mmd]

Incidentally, we discussed another (?) account take over scenario in #2144. Maybe it's worth revisiting that as well?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/3089#issuecomment-775077736
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20210208/52c16ed7/attachment.htm>