Ensure emails are sanitized (#2059)

Fixes "incomplete string escaping or encoding" raised by code scanning
harryzcy · Feb 9, 2025 · e67e2cf · e67e2cf
1 parent 45420e4
commit e67e2cf
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/web/src/contexts/DraftEmailContext.ts b/web/src/contexts/DraftEmailContext.ts
@@ -270,9 +270,12 @@ const parseAddress = (
   let displayName = ''
   let email = ''
 
-  if (address.includes('<')) {
+  const countSubstring = (str: string, sub: string) => {
+    return str.split(sub).length - 1
+  }
+  if (countSubstring(address, '<') == 1 && countSubstring(address, '>') == 1) {
     displayName = address.split('<')[0].trim()
-    email = address.split('<')[1].replace('>', '').trim()
+    email = address.split('<')[1].replaceAll('>', '').trim()
 
     if (displayName.startsWith('"') && displayName.endsWith('"')) {
       displayName = displayName.slice(1, -1)