mirror of
https://git.anonymousland.org/anonymousland/synapse.git
synced 2025-02-17 16:34:06 -05:00
![Andrew Morgan](/assets/img/avatar_default.png)
The validation links sent via email had their query parameters inserted without any URL-encoding. Surprisingly this didn't seem to cause any issues, but if a user were to put a `/` in their client_secret it could lead to problems.