• erio's avatar
    fix: address audit findings for notify, websearch and security · 4e96a6fa
    erio authored
    - Fix GetByKeyForAuth missing user.FieldEmail and user.FieldUsername (notifications sent to empty address)
    - Guard against empty email in collectBalanceNotifyRecipients
    - Remove non-atomic TotalRecharged read-modify-write in admin balance adjustment
    - HTML-escape userName/siteName/accountName in notification email templates
    - Fix timer leak in ProfileBalanceNotifyCard (add onUnmounted cleanup)
    - Add warning log on websearch proxy URL resolution failure
    4e96a6fa
balance_notify_service.go 13.5 KB