Recently I've got a task with the requirement - "Remove the message %name is not recognized as a username or an email address" because it causes security problems."
When I started to work on it I've discovered that this message is directly hardcoded in the core's code.
(@see core/modules/user/src/Form/UserPasswordForm.php)
I think it would be great to have the opportunity to change/hide this text without the developer's intervention.
The idea is to move this text from code to some configuration page/area.
Active
11.0 🔥
Last updated
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Do we need this feature of configurable message? As per the issue #1521996: Password reset form reveals whether an email or username is in use → we are not enumerating the user information (username or email) in the password reset form. Also, the issue is closed now.