You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
Verification codes in HTML-only mail are found again when the code stands in a table cell or a
heading of its own: the text ran into the next sentence ("842526Dieser Einmalcode …"), and the
space after a bold code went missing ("9063ist der Code"). The guess now reads such mail with
each block on a line of its own.
A validity written after the number ("5 Minuten gültig") or as a word ("verfällt nach zwei
Minuten", "expires in ten minutes") is read; such codes counted as valid for 15 minutes.
Added
The guess also finds sign-in and confirmation links (kind: "link"): exactly one https link
to the From domain behind a button such as "Sign in" or "E-Mail bestätigen", in mail that says
it was asked for or expires, not in list, bulk or reply mail and without a redirect in the
link, and only with DMARC passed like every guess. See docs/verification-codes.md and docs/security-audit-0.26.2.md.