Disable lodash template's escape

strapi · Jan 9, 2023 · 6f07d33 · 6f07d33
1 parent 7c391c2
commit 6f07d33
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/packages/core/email/server/services/email.js b/packages/core/email/server/services/email.js
@@ -37,9 +37,11 @@ const sendTemplatedEmail = (emailOptions = {}, emailTemplate = {}, data = {}) =>
     (compiled, attribute) =>
       emailTemplate[attribute]
         ? Object.assign(compiled, {
-            [attribute]: _.template(emailTemplate[attribute], { interpolate, evaluate: false })(
-              data
-            ),
+            [attribute]: _.template(emailTemplate[attribute], {
+              interpolate,
+              evaluate: false,
+              escape: false,
+            })(data),
           })
         : compiled,
     {}

diff --git a/packages/plugins/users-permissions/server/services/users-permissions.js b/packages/plugins/users-permissions/server/services/users-permissions.js
@@ -241,7 +241,7 @@ module.exports = ({ strapi }) => ({
     const interpolate = createStrictInterpolationRegExp(allowedTemplateVariables, 'g');
 
     try {
-      return _.template(layout, { interpolate, evaluate: false })(data);
+      return _.template(layout, { interpolate, evaluate: false, escape: false })(data);
     } catch (e) {
       throw new errors.ApplicationError('Invalid email template');
     }