[wp-trac] [WordPress Trac] #32429: Password reset links should expire

[WordPress Trac]

#32429: Password reset links should expire
--------------------------+--------------------------
 Reporter:  markjaquith   |       Owner:  markjaquith
     Type:  defect (bug)  |      Status:  reviewing
 Priority:  normal        |   Milestone:  4.3
Component:  Security      |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+--------------------------

Comment (by dd32):

 [attachment:32429.7.diff 32429.7.diff] builds off that to make the
 `password_reset_key_expired` filter continue to work.

 In previous patches it was impossible for that filter to ever run, for the
 plain-text keys or for hashed keys without an expiration, now it runs for
 both.
 This is mostly untested, but I think works as expected.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32429#comment:25>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform