securityfix: CP-30: Manage Website – Compose

2025-11-15 17:56:12 +01:00 · 2021-08-30 12:56:26 +05:00
parent 0e999e23c2
commit ec7264c946
1 changed files with 3 additions and 0 deletions
--- a/emailMarketing/emailMarketingManager.py
+++ b/emailMarketing/emailMarketingManager.py
@@ -690,6 +690,9 @@ class EmailMarketingManager:
            replyTo = data['replyTo']
            emailMessage = data['emailMessage']

+            if ACLManager.CheckRegEx('[\w\d\s]+$', name) == 0:
+                return ACLManager.loadErrorJson()
+
            admin = Administrator.objects.get(pk=userID)
            newTemplate = EmailTemplate(owner=admin, name=name.replace(' ', ''), subject=subject, fromName=fromName, fromEmail=fromEmail,
                                        replyTo=replyTo, emailMessage=emailMessage)