Details
Bug
Major
Description
When a new DirectAdmin account is created, the password will be truncated in the welcome email at the point a < character is detected.
For example, if the password is:
N{,e<E|7OC?V
The following will be included in the welcome email:
N{,e
Activity
The answer is yes. This has to do with email Html parsing, not DirectAdmin. This does only apply to passwords with a '<' however.
https://www.blesta.com/forums/index.php?/topic/13357-directadmin-activation-email
Is that related to h2o parsing the templates, or we parse the final message prior to delivery? Is there a global fix?
Paul Phillips
added a comment - Is that related to h2o parsing the templates, or we parse the final message prior to delivery? Is there a global fix? I don't think it is h2o taking care of this part, but it might be. It seems very likely there is a global fix, but we could also do a simple fix that doesn't allow the '<' character in the password.
We can use the built-in "safe" filter. https://github.com/speedmax/h2o-php/wiki/Built-in-filters#safe
Nice find!
Question.. will this impact other modules?