TheOdinProject / theodinproject

Main Website for The Odin Project
http://www.theodinproject.com
MIT License
3.55k stars 2.05k forks source link

Bug: Password recovery e-mails flagged as phishing by Gmail breaking hyperlinks #4573

Open scheals opened 2 weeks ago

scheals commented 2 weeks ago

Checks

Bug description

Seems that the e-mail provider has been flagged for spam/phishing OR there have been indeed similar e-mails being sent as phishing. The red bit is exactly that - that the e-mails like these were used for identity theft and not to click any links, download any attachments or provide any information. Clicking the button tells Gmail that it is a safe e-mail and allows for the hyperlinks to appear (see top e-mail).

image

Now, I do not know whether this is only Gmail's issue but from the very, very basic understanding of how these kinds of e-mail filters/blocklists work, that being is that they're shared, I imagine all the big players would be affected.

How to reproduce

  1. Go to sign in page.
  2. Click Forgot your password?.
  3. Provide your e-mail and click the button to send the e-mail.
  4. Receive e-mail that was automatically flagged and thus hyperlinks were removed.

Expected behavior

  1. Go to sign in page.
  2. Click Forgot your password?.
  3. Provide your e-mail and click the button to send the e-mail.
  4. Receive e-mail without any security concerns and thus a working hyperlink.

What browsers are you seeing the problem on?

Firefox

What OS are you using?

Windows

Discord Name

No response

Additional Comments

No response

KevinMulhern commented 1 week ago

Thanks for the report @scheals!

It looks like it might be intermittent, I'm not getting alerts on those emails. But I think theres few things we can set up on our email provider to reduce this kind of thing. Leave this one with me!