dword-design / nuxt-mail

Adds email sending capability to a Nuxt.js app. Adds a server route, an injected variable, and uses nodemailer to send emails.
Other
239 stars 18 forks source link

How to sanitize messages? #76

Open szczynk opened 3 years ago

szczynk commented 3 years ago

How exactly sanitize messages in this module?

dword-design commented 3 years ago

@szczynk Good point. We did some work on security already in this module regarding the email addresses, but sanitization is probably a thing we should enable too. I think it could be done with a change I proposed in another issue. It would make the message generation dynamic on server side and there you could add some more logic.

Have a look at this comment where I describe it: https://github.com/dword-design/nuxt-mail/issues/68#issuecomment-883610093

Would be great to get your feedback on this!

dword-design commented 2 years ago

@szczynk I have an open PR that would solve the issue feel free to have a look!