TF-3349 Fix [MU] forwarded message disclaimer and from address

[dab246]

Issue

#3349

Root cause

• We use the characters < and > in the html content so the browser treats them as HTML tags.

Solution

• Use < and > for the angle brackets to prevent browsers from interpreting them as HTML tags.

Resolved

Screen.Recording.2024-12-16.at.15.35.43.mov

[github-actions]

This PR has been deployed to https://linagora.github.io/tmail-flutter/3354.

The base branch was changed.

[hoangdat]

• should we handle HeaderEmailQuoted with transforming email content?

[dab246]

• should we handle HeaderEmailQuoted with transforming email content?

Done

Screen.Recording.2024-12-17.at.20.09.58.mov

[chibenwa]

Rather no: the email subject displayed should be <script>alert('abc def')</script> ghi klm (correctly escaped)

[dab246]

Rather no: the email subject displayed should be <script>alert('abc def')</script> ghi klm (correctly escaped)

Good catch. We will use escape html to fix this.

Screen.Recording.2024-12-17.at.22.09.24.mov

[dab246]

• Also sanitize email subject when Print email

Screen.Recording.2024-12-17.at.22.50.10.mov

[hoangdat]

please also cherry pick to maintenance-v0.11.4003

[dab246]

please also cherry pick to maintenance-v0.11.4003

Implemented at #3360