fix(security): keep imported mail subjects out of the admin audit

2026-11-09 22:52:07 +01:00
parent de3d5031c8
commit d4c486681a
5 changed files with 112 additions and 2 deletions
@@ -51,7 +51,8 @@ public sealed class AdminAuditController : ControllerBase
                e.Type,
                e.OldValue,
                e.NewValue,
-                e.Note,
+                // Imported replies keep the mailbox subject in the owner's timeline.
+                Note = e.Type == "ReplyReceived" ? null : e.Note,
                e.At,
                e.JobApplicationId
            })