runbox7
runbox7 copied to clipboard
#Signup First and last name fields accept non-word characters
Describe the bug When signing up for an account, the first and last name fields accept non-word characters and therefore strings such as links. These can then be rendered as clickable links in the alternative email address verification email that is sent.
To Reproduce Steps to reproduce the behavior:
- Go to https:/runbox.com/signup
- Enter e.g. domain.tld in the first or last name field, and complete the rest of the form
- In the alternative email address verification email that is sent, the above string is shown as a link.
Expected behavior Only word characters that would normally appear in names should be accepted.
Desktop (please complete the following information):
- OS: macOS
- Browser: Firefox
Any update regarding this?