fix: prevent XSS via quote injection in plain-text email linkifier

2026-04-18 00:35:21 +02:00
parent 850ee73048
commit f05f70a9e5
5 changed files with 98 additions and 36 deletions
@@ -209,10 +209,14 @@ body {
 }

 .email-content-text a {
-  color: var(--color-primary);
+  color: #2563eb;
  text-decoration: underline;
 }

+.dark .email-content-text a {
+  color: #60a5fa;
+}
+
 .email-content {
  font-family:
    -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue",