mirror of
https://github.com/element-hq/synapse.git
synced 2025-03-31 03:45:13 +00:00
aeb40f355c
The validation links sent via email had their query parameters inserted without any URL-encoding. Surprisingly this didn't seem to cause any issues, but if a user were to put a `/` in their client_secret it could lead to problems.
1 line
No EOL
66 B
Text
1 line
No EOL
66 B
Text
Ensure query parameters in email validation links are URL-encoded. |