-
Type:
Bug
-
Status: Resolved
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: 2023.4
-
Fix Version/s: 2023.5
-
Component/s: Configuration
-
Release Notes Summary:Default mail sender contributions values are now escaped.
-
Sprint:nxplatform #102
-
Story Points:1
Actually, values injected in
https://github.com/nuxeo/nuxeo-lts/blob/2023/server/nuxeo-nxr-server/src/main/resources/templates/common/config/default-smtp-sender-config.xml.nxftl
are interpolated without escaping.
But the following fields may contain reserved xml characters:
- mail.from (see https://en.wikipedia.org/wiki/Email_address#Local-part)
- mail.transport.user
- mail.transport.password