fix(security): integrate mail subject isolation into A3

2026-11-10 12:48:38 +01:00
parent 2717c6afaf
commit 2033aea31b
6 changed files with 463 additions and 3 deletions
@@ -51,7 +51,8 @@ public sealed class AdminAuditController : ControllerBase
                e.Type,
                e.OldValue,
                e.NewValue,
-                e.Note,
+                // Imported replies keep the mailbox subject in the owner's timeline.
+                Note = e.Type == "ReplyReceived" ? null : e.Note,
                e.At,
                e.JobApplicationId
            })