Set dummy resetRequest cookie on password reset errors to prevent username/email enumeration (TypeScript).#1602

Open

zeropath-ai-dev[bot] wants to merge 3 commits intomasterfrom

zvuln_fix_natural_language_rule_violation_1755147237506775

Commits on Aug 14, 2025

fix: replace specific 401 response with generic error handling
ZeroPath
committed
fix: set dummy resetRequest cookie to prevent username/email enumeration
ZeroPath
committed
fix: correct search/replace block in resetPassword route handling
ZeroPath
committed