[zanata/zanata-platform] 3fbc16: fix(ZNTA-544): include user content in emails as p...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/zanata/zanata-platform
  Commit: 3fbc165258165eea88d786f589eda95444abf5a1
      https://github.com/zanata/zanata-platform/commit/3fbc165258165eea88d786f589eda95444abf5a1
  Author: Damian Jansen <djansen at redhat.com>
  Date:   2018-06-01 (Fri, 01 Jun 2018)

  Changed paths:
    M server/services/src/main/java/org/zanata/email/ContactAdminAnonymousEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/ContactAdminEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/ContactLanguageCoordinatorEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/ContactLanguageTeamMembersEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/DeclineLanguageRequestEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/RequestToJoinLanguageEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/RequestToJoinVersionGroupEmailStrategy.java
    M server/services/src/main/java/org/zanata/util/HtmlUtil.java
    M server/services/src/main/resources/org/zanata/email/templates/decline_language_team_request.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_admin.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_admin_anonymous.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_coordinator.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_language_team_members.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_request_to_join_group.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_request_to_join_language.vm
    M server/services/src/test/java/org/zanata/email/VelocityEmailStrategyTest.java
    M server/services/src/test/java/org/zanata/util/HtmlUtilTest.java

  Log Message:
  -----------
  fix(ZNTA-544): include user content in emails as plain text (#815)

* fix(ZNTA-544): incoming email message to plaintext

Incoming messages should be plaintext, to avoid malicious links
hidden in anchors

* fix(ZNTA-544): fix test
* fix(ZNTA-544): escape and santize instead
* fix(ZNTA-544): rename parameter to safeHtmlMessage
* fix(ZNTA-544): rename htmlMessage to userMessage
* fix(ZNTA-544): codacy - explicit scope on variable
* fix(ZNTA-544): safe-html more emails


  Commit: 79e359d6a8433697726f0c046f137e08f7510972
      https://github.com/zanata/zanata-platform/commit/79e359d6a8433697726f0c046f137e08f7510972
  Author: Zanata Build Server <jenkins at zanata.org>
  Date:   2018-06-01 (Fri, 01 Jun 2018)

  Changed paths:
    M server/services/src/main/java/org/zanata/email/ContactAdminAnonymousEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/ContactAdminEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/ContactLanguageCoordinatorEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/ContactLanguageTeamMembersEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/DeclineLanguageRequestEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/RequestToJoinLanguageEmailStrategy.java
    M server/services/src/main/java/org/zanata/email/RequestToJoinVersionGroupEmailStrategy.java
    M server/services/src/main/java/org/zanata/util/HtmlUtil.java
    M server/services/src/main/resources/org/zanata/email/templates/decline_language_team_request.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_admin.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_admin_anonymous.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_coordinator.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_language_team_members.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_request_to_join_group.vm
    M server/services/src/main/resources/org/zanata/email/templates/email_request_to_join_language.vm
    M server/services/src/test/java/org/zanata/email/VelocityEmailStrategyTest.java
    M server/services/src/test/java/org/zanata/util/HtmlUtilTest.java

  Log Message:
  -----------
  Merge commit '3fbc165258165eea88d786f589eda95444abf5a1' into HEAD


Compare: https://github.com/zanata/zanata-platform/compare/4760f8f00e6d...79e359d6a843
      **NOTE:** This service been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.