Correctly escape user-defined names in emails

Closes #1151 Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-10-31 13:00:45 +01:00
parent 695d773d50
commit 470a3e594b
28 changed files with 162 additions and 118 deletions
--- a/lib/web/templates/email/email.html.heex
+++ b/lib/web/templates/email/email.html.heex
@@ -109,7 +109,7 @@
                    <%= gettext("This is a demonstration site to test Mobilizon.") %>
                  </p>
                  <p style="margin: 0; color: #3A384C;">
-                    <%= gettext("<b>Please do not use it for real purposes.</b>") |> raw() %>
+                    <b><%= gettext("Please do not use it for real purposes.") %></b>
                  </p>
                </td>
              </tr>