[wp-trac] [WordPress Trac] #42957: Usernames ending in a period generate invalid reset password links in certain email clients

WordPress Trac noreply at wordpress.org
Thu Jul 4 21:59:51 UTC 2024


#42957: Usernames ending in a period generate invalid reset password links in
certain email clients
-------------------------------------------------+-------------------------
 Reporter:  paulcline                            |       Owner:  dmsnell
     Type:  defect (bug)                         |      Status:  closed
 Priority:  normal                               |   Milestone:  6.7
Component:  Users                                |     Version:
 Severity:  normal                               |  Resolution:  fixed
 Keywords:  has-patch has-unit-tests needs-dev-  |     Focuses:
  note dev-feedback                              |
-------------------------------------------------+-------------------------
Changes (by dmsnell):

 * owner:  (none) => dmsnell
 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"58674" 58674]:
 {{{
 #!CommitTicketReference repository="" revision="58674"
 Users: Avoid ambiguous password reset URLs for usernames ending in a
 period.

 When WordPress sends out a password-reset or new-user email, it generates
 a link for someone to follow in order to take them to the reset page. If
 the user login name ends in a period, however, that generated URL will
 end in a period and many email clients will confuse it with a
 sentence-ending period instead of being part of the query arguments.

 In this patch, the generated URL's query argument are rearranged so that
 the link will never end in a period. Alternative ideas were explored to
 create a new function to escape URL-ending periods, but this patch
 resolves
 the reported problem without raising any further architectural questions.

 Developed in https://github.com/WordPress/wordpress-develop/pull/6834
 Discussed in https://core.trac.wordpress.org/ticket/42957

 Props audrasjb, costdev, daveagp, dmsnell, hellofromTonya, markparnell,
 mukesh27, nhrrob, obrienlabs, paulcline.
 Fixes #42957.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/42957#comment:41>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list