added test for escaped alert info

2025-11-12 15:15:54 +02:00
parent ddb8c88a37
commit 94b11bf2c3
2 changed files with 5 additions and 3 deletions
--- a/mails/record.go
+++ b/mails/record.go
@@ -16,7 +16,7 @@ func SendRecordAuthAlert(app core.App, authRecord *core.Record, info string) err
 	mailClient := app.NewMailClient()

 	subject, body, err := resolveEmailTemplate(app, authRecord, authRecord.Collection().AuthAlert.EmailTemplate, map[string]any{
-		core.EmailPlaceholderAlertInfo: info,
+		core.EmailPlaceholderAlertInfo: html.EscapeString(info),
 	})
 	if err != nil {
 		return err