[wp-trac] [WordPress Trac] #42957: Usernames ending in a period generate invalid reset password links in certain email clients

WordPress Trac noreply at wordpress.org
Thu Dec 21 16:55:35 UTC 2017


#42957: Usernames ending in a period generate invalid reset password links in
certain email clients
--------------------------+------------------------------
 Reporter:  paulcline     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Users         |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+------------------------------

Comment (by paulcline):

 Periods are valid in URLs, but we can avoid the issue by forcing "." to
 encode to "%2E" when generating the link in the email.  PHP automatically
 converts the "%2E" back to "." when it's passed into the receiving side.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/42957#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list