mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-11 11:19:38 +03:00
Update email confirmation route(s)/journeys to be confirmed via POST #3296
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ssddanbrown on GitHub (Oct 22, 2022).
Originally assigned to: @ssddanbrown on GitHub.
Currently
ConfirmEmailController@confirmis done via GET, which could be coincidentally triggered by systems generally expecting GET endpoints to be idempotent, such as email link scanning systems.Flow & handling should be updated so confirmation action is done via user confirmation in non-GET request.