ldc-volena/app/Mail/SendConfirmationMail.php
2026-04-24 15:06:55 +02:00

91 lines
2.2 KiB
PHP

<?php
namespace App\Mail;
use Illuminate\Bus\Queueable;
use Illuminate\Mail\Mailable;
use Illuminate\Mail\Mailables\Content;
use Illuminate\Mail\Mailables\Envelope;
use Illuminate\Mail\Markdown;
use Illuminate\Queue\SerializesModels;
use Illuminate\Support\Arr;
use Illuminate\Support\Facades\Blade;
use Illuminate\Support\Str;
class SendConfirmationMail extends Mailable
{
use Queueable;
use SerializesModels;
/**
* @var \stdClass
*/
private \stdClass $data;
/**
* Create a new message instance.
*
* @param \stdClass $data
* @return void
*/
public function __construct(\stdClass $data)
{
$this->data = clone $data;
$this->sanitizeStringInputs();
}
/**
* Sanitizes user message
*
* ! This is not recursive !
* * Prevent xss injection via markdown interpretation.
*
* La solution devrai etre de filtrer en sortie, mais il n'est pas possible de
*
* @return void
*/
private function sanitizeStringInputs(): void
{
$this->data = (object) Arr::map((array) $this->data, function ($el) {
if (is_string($el)) {
$el = \htmlspecialchars(\strip_tags(Blade::render(
(string) Markdown::parse($el)
)));
$el = Str::of($el)->replaceMatches(
'/[^\p{L}0-9\n\s\@\.\:\-\_\?\!\;\(\)\+\-\/\\\=]+/us',
''
)->trim()->wordWrap(75, "\n", true)->toString();
}
return $el;
});
}
/**
* Get the message envelope.
*
* @return \Illuminate\Mail\Mailables\Envelope
*/
public function envelope(): \Illuminate\Mail\Mailables\Envelope
{
return new Envelope(
subject: sprintf(
'%s - %s',
trans('Confirmation d\'envoi'),
config('app.name')
),
);
}
/**
* Get the message content definition.
*
* @return \Illuminate\Mail\Mailables\Content
*/
public function content(): \Illuminate\Mail\Mailables\Content
{
return new Content(
markdown: 'emails.send-confirmation-form',
with: ['data' => $this->data],
);
}
}