News for hackers. Stuff that matters.
Re:Gmail is opening and caching URLs within emails without u... by iamdual on Friday August 20, 2021 @05:13AM (#28244172)
You need to authenticate the user before the activation.
Re:Gmail is opening and caching URLs within emails without u... by kyrra on Friday August 20, 2021 @05:36AM (#28244295)
This. You could rely on a cookie during the get request as well, that you set on the users browser during registration. Or re-auth after click.
Re:Gmail is opening and caching URLs within emails without u... by simonw on Friday August 20, 2021 @08:52AM (#28245404)
The problem with that is people like myself who tend to register on a laptop but then click the email verification link on their mobile phone.

(Because waiting for Gmail to load on a laptop is painful, whereas on my phone is shows up as a push notification within seconds)

Re:Gmail is opening and caching URLs within emails without u... by winrid on Friday August 20, 2021 @11:01AM (#28246812)
What about magic links? :)