If you haven’t already, check out our contributing guidelines for onboarding and email [email protected] to request to join our Slack channel!

Action Performed:

1. Launch the special build
2. On the log in screen, enter a new account email
3. Navigate to the email inbox and open the validate email and copy the link
4. Modify the last portion of the link by a character, i.e.
5. In a text box - Formulate the URL by using the path obtained from step 3 http://staging.new.expensify.com/v/

• E.g if the original link was https://stagin.new.expensify.com/v/7453760/123884
  change a single character > https://staging.new.expensify.com/v/7453760/12388**8**

6. Navigate to the compiled link

Expected Result:

You're redirected to the app and a "Magic code is incorrect" is displayed

Actual Result:

The system redirect user to mobile browser with displayed a magic code with **

Workaround:

Unknown

Platforms:

Which of our officially supported platforms is this issue occurring on?

• Android / native
• Android / Chrome
• iOS / native
• iOS / Safari
• MacOS / Chrome / Safari
• MacOS / Desktop

Version Number: 1.3.11.2

Reproducible in staging?: No

Reproducible in production?: No

If this was caught during regression testing, add the test name, ID and link from TestRail:

Email or phone of affected tester (no customers):

Logs: https://stackoverflow.com/c/expensify/questions/4856

Notes/Photos/Videos: Any additional supporting documentation

Expensify/Expensify Issue URL:

Issue reported by: Applause - Internal Team

Slack conversation:

View all open jobs on GitHub