it-at-m / it-at-m/refarch

[Feature] Sanitize mail template inputs

Open
#784 0 comments 0 reactions 0 assignees View on GitHub
Component: Integrations Type: Feature
Dominant language
Java
Stars
7
Forks
5
Avg merge
2d 4h
Merged PRs (30d)
34

Description

### Relevant component

refarch-integrations

### Problem description (optional)

Currently the mail template inputs are directly used and allow Cross-Site-Scripting attacks. Under DigiWF `com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer` was used for that.

### Desired solution

Add mail template input sanitization to prevent XSS attacks.

### Considered alternatives (optional)

_No response_

### Additional context (optional)

_No response_

### No duplicate

- [x] I confirm that this issue is not a duplicate

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.