style: reset password contents

[hib4]

No description provided.

[github-actions]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
Possible issue	Ensure unique question order You have two questions with order: 4 in the PROFILE state, which will collide in ordering. Increment the file question’s order to 5 to ensure unique sequencing. functions/src/utils/fake_data_populator.ts [151-155] q = { id: faker.string.uuid(), - order: 4, + order: 5, state: APPLICATION_STATES.PROFILE, text: "Profile Photo", Suggestion importance[1-10]: 6 __ Why: Two questions in the PROFILE state both use order: 4, which will collide; bumping the file question to 5 maintains unique sequencing.	Low
General	Add alias for reset endpoint Renaming the endpoint may break existing clients still calling /request-reset. Add the old route as an alias to maintain backward compatibility during transition. functions/src/routes/auth.ts [15] +router.post("/request-reset", requestPasswordReset); router.post("/reset-password", requestPasswordReset); Suggestion importance[1-10]: 6 __ Why: Introducing the old /request-reset route alongside /reset-password preserves backward compatibility and avoids breaking existing clients.	Low
Security	Encode reset link URL If link contains unsafe characters it may break the HTML or introduce injection. Wrap it with encodeURI to ensure it’s properly escaped in the href. functions/src/controllers/auth_controller.ts [450] -<a href="${link}" style="background-color: #4299e1; color: white; padding: 12px 24px; text-decoration: none; border-radius: 6px; display: inline-block; font-weight: bold; margin-bottom: 25px;">Reset Password</a> +<a href="${encodeURI(link)}" style="background-color: #4299e1; color: white; padding: 12px 24px; text-decoration: none; border-radius: 6px; display: inline-block; font-weight: bold; margin-bottom: 25px;">Reset Password</a> Suggestion importance[1-10]: 5 __ Why: Wrapping link with encodeURI ensures the URL is properly escaped and helps prevent injection or formatting issues, though risk is low for internal links.	Low