Werk #7067: mail: escape notification context

Komponente Notifications
Titel mail: escape notification context
Datum 20.03.2019
Checkmk Edition Checkmk Raw (CRE)
Checkmk-Version 1.5.0p14 1.6.0b1
Level Kleine Änderung
Klasse Sicherheitsfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

The notification context which contains e.g. the host name and the service description is now escaped properly, i.e. '<' is replaced by '<' and so on. Only the HTML section which can be specified in the options of a notification rule is not escaped.

Zur Liste aller Werks