Fix race condition vulnerability, by ensuring the `unconfirmed_email` is always saved#5784

Open

grantcox wants to merge 2 commits intoheartcombo:mainfrom

grantcox:email-confirmation-race-condition-vulnfix

Commits on Feb 3, 2026

Fix race condition vulnerability, by ensuring the unconfirmed_email is always saved even if the submitted value is the same as the in-memory model's state
grantcox
committed
Improve the Confirmable race condition test

grantcox
and
runephilosof-abtion
committed