6b1864fbcd
Using the `_html` suffix in an i18n key is the same as using `html_safe` on it, which means that translation could potentially be used for XSS attacks.
16 lines
640 B
Plaintext
16 lines
640 B
Plaintext
<td style="padding-bottom: 20px; padding-left: 10px;">
|
|
|
|
<p style="font-family: 'Open Sans','Helvetica Neue',arial,sans-serif; font-size: 20px;">
|
|
<%= sanitize(t("mailers.direct_message_for_sender.title",
|
|
receiver: @direct_message.receiver.name)) %>
|
|
</p>
|
|
|
|
<h2 style="font-family: 'Open Sans','Helvetica Neue',arial,sans-serif; font-size: 18px;">
|
|
<%= @direct_message.title %>
|
|
</h2>
|
|
|
|
<div style="font-family: 'Open Sans','Helvetica Neue',arial,sans-serif;font-size: 14px;font-weight: normal;line-height: 24px;">
|
|
<%= simple_format sanitize_and_auto_link(@direct_message.body), {}, sanitize: false %>
|
|
</div>
|
|
</td>
|