I'm using
- Shared E-mail (sharedemail)
- Shared E-mail Password Reset (sharedemail_pass_reset)
- Password Reset Landing Page (PRLP) (prlp)
When a user submits the password reset form, it receives two emails with links to reset the passwords for both accounts, which use the same email address. it should only share the link with the user whose email and username match.
Steps to reproduceIn config, select both email and username
Proposed resolutionOnly the user who matches the email and username should receive the email.