InvoiceShelf / docker

InvoiceShelf Docker Image public repository
https://hub.docker.com/r/invoiceshelf/invoiceshelf
14 stars 5 forks source link

MAIL Password not escaped from docker compose file #22

Closed Marthaarman closed 1 week ago

Marthaarman commented 1 month ago

I'm having an email password in my configuration file which is including an "&".

Let us say my password in the env file is: "test&123"

Now when I'm logged in and viewing the password in the settings (https://mysite.com/admin/settings/mail-configuration) I get: "testMAIL_PASSWORD=!"

So this means that the password is not being escaped.

My .env file: MAIL_PASSWORD=test&123

My docker-compose.yml: