Skip to content

Commit 5313248

Browse files
feat(security): add server-side email HTML sanitizer utility
Add Symfony HTML sanitization support and introduce a reusable EmailHtmlSanitizer utility for email-safe rich text rendering. - add dependency: symfony/html-sanitizer (^7.4) - add EmailHtmlSanitizer class under lib/Common/Security - decode legacy HTML entities before sanitizing - allow basic formatting tags and safe link schemes If needed in the future could use the symfony/html-sanitizer for other tasks.
1 parent e81f465 commit 5313248

File tree

4 files changed

+409
-2
lines changed

4 files changed

+409
-2
lines changed

composer.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@
3030
"phpmailer/phpmailer": "^7.0",
3131
"claviska/simpleimage": "^4.2",
3232
"mashape/unirest-php": "^3.0",
33-
"vlucas/phpdotenv": "^5.6"
33+
"vlucas/phpdotenv": "^5.6",
34+
"symfony/html-sanitizer": "^7.4"
3435
},
3536
"suggest": {
3637
"pear/net_ldap2": "Required for the LDAP authentication plugin. Install with: composer require pear/net_ldap2"

composer.lock

Lines changed: 324 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)