Fix bug 1748145: Temporarily remove ability to change contributor email address

[mathjazz]

Details in the bug.

[avm99963]

The bug is private, is this related to a security vulnerability?

I'm asking because as a happy downstream user of Pontoon I'd like to know whether I should apply this patch or the issue is related to the Mozilla deployment. I told a while back my l10n contributors to change their email addresses if they don't want to share it publicly since it is included in Git commits.

Thanks in advance, and thanks for developing such good software! :) I don't have a lot of experience with Python, but if there's anything you might need a hand with, I'd be happy to contribute to Pontoon and also learn some Python on the way!

[mathjazz]

@avm99963 Thanks for reaching out and for the kind words!

Indeed, this patch addresses a security issue. I've filed an issue to establish a proper release process for Pontoon, which should make it easier to follow updates and keep track of the changelog:
#2402

I've also published a post on Discourse about the fix:
https://discourse.mozilla.org/t/security-fix-changing-email-address-temporarily-disabled/91386

[avm99963]

Thanks @mathjazz! I've just subscribed to the Pontoon category.