Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sending email to non-existant voter_id sends email to all voters #381

Open
Cryptosaurus opened this issue May 10, 2023 · 0 comments
Open

Comments

@Cryptosaurus
Copy link

The voters/email page has an optional parameter voter_id to send an email to a single voter.
However, if the parameter given does not corresponds to an existing voter, it falls back to sending the mail to all voters. This is probably not what the user intended.

This can be triggers as follows:

  1. Create a test election with 2 or more voters, open the vote
  2. In a browser window, open the voter list, and click the link to send an email to voter 1
  3. In a second browser window, delete voter 1
  4. Validate the email in the first windows

Proposed fix: #380

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant