3 ms·

This has broken password reset links that Django sends[1]. 1. https://groups.google.com/d/msgid/django-developers/20d7a1d1-9c37-44df-8d6f-577f55727efc%40google

• Nextgrid 8y ago
  This breaks when the password reset link is passed through click-tracking services. Seems like a good thing - you shouldn’t be leaking password reset links (which are almost equivalent to passwords themselves) to email stalking providers.
  • orf 8y ago
    After clicking a password reset link Django performs a redirect to a change password form. The initial link tracking redirect still occurs, it's the second (domain-internal) redirect that is the issue.