Comment 3 for bug 675372

Carlos,

Something isn't quite right. The new password-recovery procedure does not ask you for the new password until you click on a confirmation link in the email message. When you click on "Recover password", the system should ask you for login and email address, both of which are required. Is that not what you see? In that case, either you are not fully re-deploying the code after applying the patch or your browser has the old Javascript client-side code cached. Could check on that? Thanks!