[Bug]: Links containing `&` are broken in notification emails (replaced with &) · mattermost/mattermost#33946

(1 留言) (1 反應) (1 負責人)TypeScript (32,880 star) (7,823 fork)batch import

Help Wanted

描述

Before you file a bug report

I have checked the issue tracker and have not found an issue that matches the one I'm filing.
This issue is not a troubleshooting question. Troubleshooting questions go here: https://forum.mattermost.com/c/trouble-shoot/16.
This issue is not a feature request. You can request features and make product suggestions here: https://mattermost.uservoice.com/forums/306457-general/.
This issue reproduces on one of the currently supported server versions.
I have read the contribution guidelines and the Mattermost Handbook Contribution Guidelines.

Mattermost Server Version

10.5.10 + 11.0.0 (community)

Steps to reproduce

Receive a notification email for a new message that contains a link with multiple query string arguments separated by &, such as https://example.com/?foo=bar&hello=world

Expected behavior

The link remains as https://example.com/?foo=bar&hello=world

Observed behavior

The link includes HTML entities, both in the displayed URL and in the href: https://example.com/?foo=bar&hello=world

貢獻者指南

技術棧: go
領域: backend
議題類型: bug
難度: 2
預計時間: 1-3 hours
活動狀態: blocked
清晰度: clear
前置要求: Go programming basicsHTML template escaping
新手友善度: 15
研究方向: The bug is in the server side code that generates notification email bodies, likely using Go's html/template package. The HTML escaping of '&' to '&' suggests incorrect handling of URL query parameters. Look for email template files in the repository, possibly under `app/notification/email` or `store/`. The issue is currently assigned, so newcomers should look for unassigned issues with similar scope.