Describe the bug
When signing up for an account, the first and last name fields accept non-word characters and therefore strings such as links. These can then be rendered as clickable links in the alternative email address verification email that is sent.
To Reproduce
Steps to reproduce the behavior:
- Go to https:/runbox.com/signup
- Enter e.g. domain.tld in the first or last name field, and complete the rest of the form
- In the alternative email address verification email that is sent, the above string is shown as a link.
Expected behavior
Only word characters that would normally appear in names should be accepted.
Desktop (please complete the following information):
- OS: macOS
- Browser: Firefox