mirror of
https://mau.dev/maunium/synapse.git
synced 2024-11-03 05:08:59 +01:00
aeb40f355c
The validation links sent via email had their query parameters inserted without any URL-encoding. Surprisingly this didn't seem to cause any issues, but if a user were to put a `/` in their client_secret it could lead to problems.
1 line
No EOL
66 B
Text
1 line
No EOL
66 B
Text
Ensure query parameters in email validation links are URL-encoded. |