fix(security): Security fix for WSTG-INPV-02. Add XSS protection on folders and mail title / content

2026-05-19 10:25:27 +00:00 · 2022-11-14 14:36:41 +01:00
parent 967479335c
commit 714acfc838
9 changed files with 91 additions and 8 deletions
@@ -198,7 +198,7 @@
  return [NSDictionary dictionaryWithObjectsAndKeys:
                         [self className], @"type",
                       type, @"contentType",
-                       [[self generateResponse] contentAsString], @"content",
+                       [[[self generateResponse] contentAsString] stringWithoutHTMLInjection: NO], @"content",
                       [self filenameForDisplay], @"filename",
                       [self preferredPathExtension], @"extension",
                       [[self sizeFormatter] stringForObjectValue: [bodyInfo objectForKey: @"size"]], @"size",