Skip to content

CaptchaChallengeService returns true if user is unknown

Paul Gascou-Vaillancourt requested to merge 359756-no-404-captcha-check into master

This changes CaptchaChallengeService's behavior so that it returns true instead of a 404 when checking a user that does not exist. This should prevent this endpoint from being used to scrape for valid email addresses.

Related to #359756

Edited by Paul Gascou-Vaillancourt

Merge request reports