[postfixadmin/postfixadmin] 314a32: Escape viewlog output by default (#1134)

[Rodrigo C. C. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/postfixadmin/postfixadmin
  Commit: 314a3242c9fd25666ac41ae47d8f815ffd346497
      https://github.com/postfixadmin/postfixadmin/commit/314a3242c9fd25666ac41ae47d8f815ffd346497
  Author: Rodrigo Cortés Cano <384...@us...>
  Date:   2026-08-29 (Sat, 29 Aug 2026)

  Changed paths:
    M public/viewlog.php
    M templates/viewlog.tpl
    A tests/ViewlogOutputSecurityTest.php

  Log Message:
  -----------
  Escape viewlog output by default (#1134)

Render log records through the default output sanitization path and
remove the inline JavaScript interpolation of log data.

Full log data remains available through a native details element without
placing it in a script context.

Refs #1128

thanks @TrapoSAMA



To unsubscribe from these emails, change your notification settings at https://github.com/postfixadmin/postfixadmin/settings/notifications