Open McLaynV opened 3 months ago
When a user has a space in their username, they are unable to reset a forgotten password.
It looks like some URL (un)escaping issue.
https://HOSTNAME/admin/accounts/users/:add
test T
Testor Testorson
https://HOSTNAME/admin/forgot
https://HOSTNAME/admin/reset/u/test T/fd16523e91eab7acc748ed01715b1d4c
test%20t
%20
RESET_INVALID_LINK
Description
When a user has a space in their username, they are unable to reset a forgotten password.
It looks like some URL (un)escaping issue.
Version
Steps to reproduce
https://HOSTNAME/admin/accounts/users/:add
to add a new user and fill the form:test T
Testor Testorson
(or anything else)https://HOSTNAME/admin/forgot
to reset a passwordtest T
https://HOSTNAME/admin/reset/u/test T/fd16523e91eab7acc748ed01715b1d4c
test%20t
(the username is URL-encoded with the space replaced with%20
)RESET_INVALID_LINK
error message is shown