mirror of
https://github.com/element-hq/synapse.git
synced 2024-11-27 12:08:32 +03:00
aeb40f355c
The validation links sent via email had their query parameters inserted without any URL-encoding. Surprisingly this didn't seem to cause any issues, but if a user were to put a `/` in their client_secret it could lead to problems.
1 line
No EOL
66 B
Text
1 line
No EOL
66 B
Text
Ensure query parameters in email validation links are URL-encoded. |