mirror of
https://github.com/element-hq/synapse
synced 2024-08-19 20:50:21 +00:00
The validation links sent via email had their query parameters inserted without any URL-encoding. Surprisingly this didn't seem to cause any issues, but if a user were to put a `/` in their client_secret it could lead to problems.
1 line
No EOL
66 B
Text
1 line
No EOL
66 B
Text
Ensure query parameters in email validation links are URL-encoded. |