element-hq / element-hq/element-web
Regression in account persistence: clicking a link to validate your email results in overwriting your account
Open
S-Major
X-Regression
- Dominant language
- TypeScript
- Stars
- 13.5k
- Forks
- 2.8k
- PR merge metrics
- PR metrics pending
Description
1. Be logged in to riot.im/develop (or /app)
2. In an incognito tab, or in a different browser, open riot and register for an account with an email
3. Click the link to validate your email, which opens riot
4. Your session has been replaced by a guest session
Contributor guide
Assessment
This issue has not been assessed yet.