Skip to content

fix: urlencode email in reset password link #15167

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 21, 2024

Conversation

DanielleMaywood
Copy link
Contributor

@DanielleMaywood DanielleMaywood commented Oct 21, 2024

Fixes #15151

This runs urlencode (provided by text/template) on the email address in the link. This ensures the link will work if a user has an email in the form user+label@example.com.

@DanielleMaywood DanielleMaywood marked this pull request as ready for review October 21, 2024 14:28
Copy link
Member

@johnstcn johnstcn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One possible improvement here could be to make little Bobby tables' email address weirder. See: https://en.wikipedia.org/wiki/Email_address#Examples

Apart from that, LGTM 👍

@DanielleMaywood DanielleMaywood merged commit 23f61c6 into main Oct 21, 2024
26 checks passed
@DanielleMaywood DanielleMaywood deleted the dm-fix-password-reset-link branch October 21, 2024 15:10
@github-actions github-actions bot locked and limited conversation to collaborators Oct 21, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

password reset emails with user+label@host are not correctly URL-encoded
2 participants