Bug #94589
closed
Flawed link in password reset mail
100%
Description
In the plain text part of the password reset mail, the password recovery link is wrongly htmlencoded ("…validate&t=…").
How to reproduce:
1. In the be login form, click the "Forgot your password?" link.
2. In the "Reset Your Password" box, enter your e-mail address.
3. Open the incoming e-mail in plain text mode.
4. Clicking the reset link causes the error message "The password reset link is invalid or has expired."
Updated by Gerrit Code Review almost 3 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/69967
Updated by Gerrit Code Review almost 3 years ago
Patch set 1 for branch 10.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/70072
Updated by Oliver Bartsch almost 3 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset f155250fa40b7ee6b72ab4516dc73b829b0942b8.
Updated by