(openmeetings) branch master updated: [OPENMEETINGS-2825] invitation sanitizing is added

[solomax]

This is an automated email from the ASF dual-hosted git repository.

solomax pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/openmeetings.git


The following commit(s) were added to refs/heads/master by this push:
     new b545da9fa [OPENMEETINGS-2825] invitation sanitizing is added
b545da9fa is described below

commit b545da9fa87fe292f35fb8359ec5c4649460fe0e
Author: Maxim Solodovnik <solo...@apache.org>
AuthorDate: Wed Aug 26 10:22:26 2026 +0700

    [OPENMEETINGS-2825] invitation sanitizing is added
---
 .../src/main/java/org/apache/openmeetings/db/util/FormatHelper.java    | 2 +-
 .../main/java/org/apache/openmeetings/webservice/RoomWebService.java   | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git 
a/openmeetings-db/src/main/java/org/apache/openmeetings/db/util/FormatHelper.java
 
b/openmeetings-db/src/main/java/org/apache/openmeetings/db/util/FormatHelper.java
index 43ae27a1b..1b2594091 100644
--- 
a/openmeetings-db/src/main/java/org/apache/openmeetings/db/util/FormatHelper.java
+++ 
b/openmeetings-db/src/main/java/org/apache/openmeetings/db/util/FormatHelper.java
@@ -59,7 +59,7 @@ public class FormatHelper {
        }
 
        public static String sanitize(String str) {
-               return new HtmlPolicyBuilder()
+               return str == null ? "" : new HtmlPolicyBuilder()
                                .allowCommonInlineFormattingElements()
                                .allowCommonBlockElements()
                                .allowElements("a").allowStandardUrlProtocols()
diff --git 
a/openmeetings-webservice/src/main/java/org/apache/openmeetings/webservice/RoomWebService.java
 
b/openmeetings-webservice/src/main/java/org/apache/openmeetings/webservice/RoomWebService.java
index 354926548..24b2728e7 100644
--- 
a/openmeetings-webservice/src/main/java/org/apache/openmeetings/webservice/RoomWebService.java
+++ 
b/openmeetings-webservice/src/main/java/org/apache/openmeetings/webservice/RoomWebService.java
@@ -19,6 +19,7 @@
 package org.apache.openmeetings.webservice;
 
 import static org.apache.openmeetings.webservice.Constants.TNS;
+import static org.apache.openmeetings.db.util.FormatHelper.sanitize;
 
 import java.util.ArrayList;
 import java.util.List;
@@ -566,7 +567,7 @@ public class RoomWebService extends BaseWebService {
                        if (i != null) {
                                if (sendmail) {
                                        try {
-                                               
inviteManager.sendInvitationLink(i, MessageType.CREATE, invite.getSubject(), 
invite.getMessage(), false, null);
+                                               
inviteManager.sendInvitationLink(i, MessageType.CREATE, invite.getSubject(), 
sanitize(invite.getMessage()), false, null);
                                        } catch (Exception e) {
                                                throw new 
InternalServiceException(e.getMessage());
                                        }