[GH-ISSUE #532] Bug: Deeplinks aren't clickable #341

New issue

Closed

opened 2026-03-15 13:59:37 +03:00 by kerem · 3 comments

kerem commented

2026-03-15 13:59:37 +03:00

Owner

Originally created by @redeye-x1 on GitHub (Jun 30, 2025).
Original GitHub issue: https://github.com/axllent/mailpit/issues/532

Hi,

thank you for your great work.

I currently use Mailpit for testing my app (mail delivery, verification mails, and so on) and I've noticed something. If you use http or https links in the mail, it works fine. If you use deeplinks (to directly open routes in app) it makes the link unclickable:

For example this link:

myapp://verify?token=ZWVkNjc3MmExNTM5NmQyOTkyMTFF39jYWRlZmE3MDQzOTM4MGMwYWFhNTk5YWNjNGQ1MWIyYzNlN2NlNzJjMTFmMDdiNzZmZDdhZjU2YzQ2OGY3Yjk0NThlNmU0ZTdjNzhh&tenantId=public

Checking the HTML of the mail, I've recognized that the HREF of the link gets removed.

I've already tried setting

MP_ALLOW_UNTRUSTED_TLS: true
but that didn't help.

Any ideas?

Originally created by @redeye-x1 on GitHub (Jun 30, 2025). Original GitHub issue: https://github.com/axllent/mailpit/issues/532 Hi, thank you for your great work. I currently use Mailpit for testing my app (mail delivery, verification mails, and so on) and I've noticed something. If you use http or https links in the mail, it works fine. If you use deeplinks (to directly open routes in app) it makes the link unclickable: For example this link: ``` myapp://verify?token=ZWVkNjc3MmExNTM5NmQyOTkyMTFF39jYWRlZmE3MDQzOTM4MGMwYWFhNTk5YWNjNGQ1MWIyYzNlN2NlNzJjMTFmMDdiNzZmZDdhZjU2YzQ2OGY3Yjk0NThlNmU0ZTdjNzhh&tenantId=public ``` Checking the HTML of the mail, I've recognized that the HREF of the link gets removed. I've already tried setting ` MP_ALLOW_UNTRUSTED_TLS: true ` but that didn't help. Any ideas?

kerem

2026-03-15 13:59:37 +03:00

closed this issue
added the
enhancement
label

kerem commented

2026-03-15 13:59:54 +03:00

Author

Owner

@axllent commented on GitHub (Jun 30, 2025):

Hi @mago-x1. This is actually by design. The HTML is sanitised before it is rendered in the browser to remove potential nasty things like JavaScript. Although this is not a bug, your point is valid as this also blocks by default unrecognised link protocols like myapp://. I have just pushed a change for this which will be available in a new release later this week (or potentially early next week). In the meantime however, if you use Docker, you can use the docker edge build (axllent/mailpit:edge) which has this change already.

@axllent commented on GitHub (Jun 30, 2025): Hi @mago-x1. This is actually by design. The HTML is sanitised before it is rendered in the browser to remove potential nasty things like JavaScript. Although this is not a bug, your point is valid as this also blocks by default unrecognised link protocols like `myapp://`. I have just pushed a change for this which will be available in a new release later this week (or potentially early next week). In the meantime however, if you use Docker, you can use the docker edge build (`axllent/mailpit:edge`) which has this change already.

kerem commented

2026-03-15 13:59:59 +03:00

Author

Owner

@redeye-x1 commented on GitHub (Jul 1, 2025):

@axllent just tried the edge build, works perfectly fine.

thank you for your fast help. love your work.

@redeye-x1 commented on GitHub (Jul 1, 2025): @axllent just tried the edge build, works perfectly fine. thank you for your fast help. love your work.

kerem commented

2026-03-15 14:00:04 +03:00

Author

Owner

@axllent commented on GitHub (Jul 1, 2025):

Thank you for the feedback and the kind words ❤️

@axllent commented on GitHub (Jul 1, 2025): Thank you for the feedback and the kind words ❤️

kerem referenced this issue

2026-03-15 14:23:25 +03:00

[PR #341] [CLOSED] Chore: Bump vue from 3.4.31 to 3.4.35 #519