tjh.dev
forked from
tangled.org/core
Mirror of @tangled.org/core. Running on a Raspberry Pi Zero 2 (Please be gentle).
urlencode email verification url's query params
when trying to verify a [plus addressed](https://www.google.com/search?q=plus+addressing) email id, opening the received verification link gives "Invalid verification code. Please request a new verification email."
this is due to unescaped `+` in the email id. ideally all the query params should be url encoded.
+2
-1
+2
-1
appview/state/settings.go
+2
-1
appview/state/settings.go
···
6
6
"fmt"
7
7
"log"
8
8
"net/http"
9
+
"net/url"
9
10
"strings"
10
11
"time"
11
12
···
178
177
appUrl = "https://tangled.sh"
179
178
}
180
179
181
-
return fmt.Sprintf("%s/settings/emails/verify?did=%s&email=%s&code=%s", appUrl, did, email, code)
180
+
return fmt.Sprintf("%s/settings/emails/verify?did=%s&email=%s&code=%s", appUrl, url.QueryEscape(did), url.QueryEscape(email), url.QueryEscape(code))
182
181
}
183
182
184
183
func (s *State) SettingsEmailsVerify(w http.ResponseWriter, r *http.Request) {