GithubBackup/cloudflare_temp_email
1
0
Fork 0
mirror of https://github.com/dreamhunter2333/cloudflare_temp_email.git synced 2026-09-07 00:17:12 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(frontend): sanitize announcement HTML (#1039)

Browse Source 
Sanitize HTML announcements in both the About page and startup notification through a shared DOMPurify helper. Add regression tests and bilingual changelog entries.

Co-authored-by: tuanaiseo <tuanaiseo@gmail.com>
This commit is contained in:
tuanaiseo
2026-07-28 17:49:32 +08:00
committed by GitHub
parent 4c1e593d07
commit 8c883b269f
6 changed files with 38 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG_EN.md
+1
View File
@@ -15,6 +15,7 @@
### Bug Fixes
- fix: |Frontend| Sanitize HTML announcements in both the About page and startup notification through a shared DOMPurify helper, preventing executable tags or event attributes in `ANNOUNCEMENT` from causing XSS
- fix: |Worker| Align junk-mail checking with authentication standards: treat SPF, DKIM, and DMARC `none` plus SPF/DKIM `neutral` as absent, and ignore unregistered results and unsupported method versions; `JUNK_MAIL_FORCE_PASS_LIST` still requires an explicit supported `pass`
- fix: |Admin| When deleting an address from the admin panel, delete its mails, sender records, sendbox and auto-reply entries before removing the address row itself; previously the address row was deleted first, so the name-based subqueries matched nothing and the mails were left orphaned in the database
- fix: |AI Extract| Strengthen the prompt to keep original link domains from the email, preventing small models from rewriting verification-link domains (issue #1072)