Prevent bad actors injecting behavior into emails

thinknimble · Sep 23, 2024 · 5369090 · 5369090
1 parent a16b513
commit 5369090
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/...roject_slug}}/server/{{cookiecutter.project_slug}}/core/templates/_action-email-base.html b/...roject_slug}}/server/{{cookiecutter.project_slug}}/core/templates/_action-email-base.html
@@ -1,5 +1,6 @@
 {%- raw -%}
 {% load static %}
+{% autoescape on %}
 
 {% comment %}
 
@@ -248,4 +249,5 @@
 </table>
 </body>
 </html>
+{% endautoescape %}
 {%- endraw -%}
diff --git a/...project_slug}}/server/{{cookiecutter.project_slug}}/core/templates/_alert-email-base.html b/...project_slug}}/server/{{cookiecutter.project_slug}}/core/templates/_alert-email-base.html
@@ -1,5 +1,6 @@
 {%- raw -%}
 {% load static %}
+{% autoescape on %}
 
 {% comment %}
 
@@ -234,4 +235,5 @@
 </table>
 </body>
 </html>
+{% endautoescape %}
 {%- endraw -%}