Make WordPress Core

Opened 6 years ago

Closed 6 years ago

#43918 closed defect (bug) (duplicate)

Reset password link not shown in email.

Reported by: jcoultas's profile jcoultas Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.9.1
Component: Mail Keywords:
Focuses: Cc:


The reset password link is stripped out by some email services due to it being surrounded by the < > symbols. Presumably this is part of an email filtering service that only allows specific html tags to prevent xss. This issue was encountered using Microsoft Exchange.

A workaround has been implemented on our local wp-login.php that involved change the < to ( and > to ). This change resolved the issue on our local environment. But, this change may not be appropriate to all environment. Discovery needs to be completed to determine what non-cosmetic purpose the < > symbols provide for other environments.

Change History (1)

#1 @swissspidy
6 years ago

  • Component changed from Login and Registration to Mail
  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Hi @ jcoultas, welcome to WordPress Trac! Thanks for the report.

Wrapping URLs in angle brackets is recommended behaviour by both the W3C and in Section C of the URI RFC.

If some email service includes the ending bracket in the link, unfortunately there's not much we can do to fix that.

Gmail usually handles this just fine. Problems only occur when using a plugin which adds HTML emails to WordPress, which causes the < and > to be interpreted as a HTML element.

With that being said, this has been reported numerous times in the past. See #23578, #43206, #18493, #21095, #23420, #39742.

Note: See TracTickets for help on using tickets.