[wp-trac] [WordPress Trac] #32429: Password reset links should expire

[WordPress Trac]

#32429: Password reset links should expire
--------------------------+--------------------------
 Reporter:  markjaquith   |       Owner:  markjaquith
     Type:  defect (bug)  |      Status:  reviewing
 Priority:  normal        |   Milestone:  4.3
Component:  Security      |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+--------------------------

Comment (by dd32):

 Additionally, the new string `Your password reset token has expired.` is
 never used by core, so the cases of that in `check_password_reset_key()`
 should probably be changed back to `Invalid key`.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32429#comment:27>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform