html entities around firstname in emails to prevent html from showing up

Leantime · Nov 12, 2024 · ce1d207 · ce1d207
1 parent 2c3ad8d
commit ce1d207
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Domain/Notifications/Services/Notifications.php b/app/Domain/Notifications/Services/Notifications.php
@@ -93,7 +93,7 @@ public function processMentions(string $content, string $module, int $moduleId,
             $links = $dom->getElementsByTagName('a');
 
             $author = $this->userRepository->getUser($authorId);
-            $authorName = $author['firstname'] ?? $this->language->__('label.team_mate');
+            $authorName = htmlentities($author['firstname']) ?? $this->language->__('label.team_mate');
 
             for ($i = 0; $i < $links->count(); $i++) {
                 $taggedUser = $links->item($i)->getAttribute('data-tagged-user-id');