GZTimeWalker / GZCTF

The GZ::CTF project, an open source CTF platform.
https://docs.ctf.gzti.me/
GNU Affero General Public License v3.0
841 stars 106 forks source link

The URL given when resetting the password does not have a port number #243

Closed zcbxxx1 closed 7 months ago

zcbxxx1 commented 7 months ago

If I deploy this project using a custom port. But when I recovered my password, the recovery link on the email sent to me did not have any port number. 图片 图片 But as you can see, the lower right corner of this password recovery email is still GZ::CTF. I wonder if this will cause concern to a small number of people, fearing phishing emails or the like. Please excuse the presumption if this is what is supposed to be the case here 图片

zcbxxx1 commented 7 months ago

Of course, this problem also exists when verifying your email address when registering.

GZTimeWalker commented 7 months ago
  1. The URL follows the Host header.
  2. The GZCTF stands for the platform, and the email content may allow to custom in the future.
zcbxxx1 commented 7 months ago

Thanks Reply About 1 , whether this issue will not be fixed?

GZTimeWalker commented 7 months ago

I need more tests to figure out how to get the full Host. Plz wait.

zcbxxx1 commented 7 months ago

Thanks!

GZTimeWalker commented 7 months ago

add platform name in https://github.com/GZTimeWalker/GZCTF/commit/dd0c61c3db3a92038a9dc1601311a948686e2519