mirror of
https://github.com/zulip/zulip.git
synced 2025-11-03 05:23:35 +00:00
1dfc62f9a0
Generally when we send confirmation emails to addresses the user has not already proven that they control, we want to avoid including in the email any user-controlled data. Doing so makes it hard for malicious actors to use the feature to send spam, since they won't have a way to include the URL for their malicious website in our emails.