rctf
rctf copied to clipboard
Add additional verify confirmation button
We were receiving some support tickets related to email verification and account recovery for UIUCTF 2024. We believe that certain spam filters or anti-phishing services with the ability to execute JavaScript will visit links to investigate them. This results in the account being verified immediately, but prevents the end user from logging in since this process renders the verification token invalid. Since account recovery uses the same verification flow, it becomes impossible for the user to log in.
This PR adds a confirmation prompt to ensure that the verification token is not consumed automatically.