You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As we put the Auth::user() into the head section, the user can see the confirmation_token. He can fake the confirmation by hitting the proper route with this param.
The confirmation_token should be a hidden attribute in User model.
The text was updated successfully, but these errors were encountered:
As we put the
Auth::user()
into the head section, the user can see theconfirmation_token
. He can fake the confirmation by hitting the proper route with this param.The
confirmation_token
should be a hidden attribute in User model.The text was updated successfully, but these errors were encountered: