From e1283cdcc8493131ade0d7a52c3b773640c1a529 Mon Sep 17 00:00:00 2001 From: Kevin Ressegaire <176156975+earzalien@users.noreply.github.com> Date: Sun, 22 Mar 2026 16:50:51 +0100 Subject: [PATCH] fix: escape invitation message --- server/src/modules/invitation/invitationActions.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/src/modules/invitation/invitationActions.ts b/server/src/modules/invitation/invitationActions.ts index 4d1469e..7a44c15 100644 --- a/server/src/modules/invitation/invitationActions.ts +++ b/server/src/modules/invitation/invitationActions.ts @@ -119,7 +119,7 @@ const add: RequestHandler = async (req, res, next) => { .replace(/"/g, """) .replace(/'/g, "'"); - const safeMessage = escapeHtml(message); + const safeMessage = escapeHtml(typeof message === "string" ? message : String(message ?? "")); const { data, error } = await resend.emails.send({ from: process.env.RESEND_FROM as string,