escape html in email for /myconext/api/idp/magic_link_request and log…

…in form
OpenConext · Jan 29, 2024 · 2677c66 · 2677c66
1 parent e2cc401
commit 2677c66
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 4 deletions.
diff --git a/account-gui/src/locale/en.js b/account-gui/src/locale/en.js
@@ -80,7 +80,7 @@ I18n.translations.en = {
     },
     magicLink: {
         header: "Check your email!",
-        info: "To sign in, click the link in the email we sent to <strong>{{email}}</strong>.",
+        info: "To sign in, click the link in the email we sent to ",
         awaiting: "Waiting for you to click the link...",
         openGMail: "Open Gmail.com",
         openOutlook: "Open Outlook.com",

diff --git a/account-gui/src/locale/nl.js b/account-gui/src/locale/nl.js
@@ -80,7 +80,7 @@ I18n.translations.nl = {
     },
     magicLink: {
         header: "Open je mailbox!",
-        info: "Om in te loggen, klik op de link in de e-mail die we hebben verstuurd naar <strong>{{email}}</strong>.",
+        info: "Om in te loggen, klik op de link in de e-mail die we hebben verstuurd naar ",
         awaiting: "Wachten tot je op de link klikt...",
         openGMail: "Open Gmail.com",
         openOutlook: "Open Outlook.com",

diff --git a/account-gui/src/routes/MagicLink.svelte b/account-gui/src/routes/MagicLink.svelte
@@ -223,6 +223,9 @@
         display: inline-block;
         margin-right: 10px;
     }
+    span.email {
+        font-weight: bold;
+    }
 
 </style>
 {#if timeOutReached}
@@ -238,7 +241,7 @@
 
     <div class="magic-link">
         <h2 class="header">{I18n.t("magicLink.header")}</h2>
-        <p>{@html I18n.t("magicLink.info", {email: DOMPurify.sanitize($user.email)})}</p>
+        <p>{I18n.t("magicLink.info")}<span class="email">{$user.email}.</span></p>
         <div class="spinner-container">
             <Spinner relative={true}/>
             <p>{I18n.t("magicLink.awaiting")}</p>

diff --git a/myconext-server/pom.xml b/myconext-server/pom.xml
@@ -36,7 +36,7 @@
         <dependency>
             <groupId>org.openconext</groupId>
             <artifactId>saml-idp</artifactId>
-            <version>1.0.0</version>
+            <version>1.0.1</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>