Security fixes + backwards compatibility with the port 80

.github/workflows/test_reporter.yml

@@ -8,7 +8,7 @@ jobs:
   report:
     runs-on: ubuntu-latest
     steps: 
-      - uses: dorny/test-reporter@v1.8.0
+      - uses: dorny/test-reporter@v1.9.1
         with:   
           name: TRX Tests
           artifact: test-results                                                          # artifact name

src/OnlineSales/Dockerfile

@@ -20,9 +20,10 @@ RUN dotnet publish "./plugins/OnlineSales.Plugin.SendGrid/OnlineSales.Plugin.Sen
 RUN dotnet publish "./plugins/OnlineSales.Plugin.Sms/OnlineSales.Plugin.Sms.csproj" -c Release -o /app/publish/plugins/OnlineSales.Plugin.Sms /p:UseAppHost=false
 RUN dotnet publish "./plugins/OnlineSales.Plugin.Vsto/OnlineSales.Plugin.Vsto.csproj" -c Release -o /app/publish/plugins/OnlineSales.Plugin.Vsto /p:UseAppHost=false
 
-FROM base AS final
+FROM base AS final
 RUN apk add --no-cache icu-libs
 RUN apk add --no-cache icu-data-full
+ENV ASPNETCORE_URLS=http://+:80
 ENV DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=false
 WORKDIR /app
 COPY --from=publish /app/publish .

src/OnlineSales/OnlineSales.csproj

@@ -70,7 +70,7 @@
     <PackageReference Include="Microsoft.AspNetCore.SpaServices.Extensions" Version="8.0.11" />
     <PackageReference Include="CsvHelper" Version="31.0.4" />
     <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.3.0" />
-    <PackageReference Include="System.Linq.Dynamic.Core" Version="1.3.12" />
+    <PackageReference Include="System.Linq.Dynamic.Core" Version="1.6.0" />
     <PackageReference Include="Unidecode.NET" Version="2.1.0" />
   </ItemGroup>
 

src/OnlineSales/Program.cs

@@ -193,7 +193,9 @@ public static async Task CreateDefaultIdentity(IServiceScope scope)
                 EmailConfirmed = true,
             };
 
-            if (await userManager.FindByEmailAsync(user.Email) == null)
+            var existingUser = await userManager.FindByEmailAsync(user.Email);
+
+            if (existingUser == null)
             {
                 var result = await userManager.CreateAsync(user, defaultUser.Password);
 

src/OnlineSales/Services/EmailFromTemplateService.cs

@@ -55,6 +55,7 @@ private static string EvaluateTemplate(string template, Dictionary<string, strin
             }
 
             var result = TokenHelper.ReplaceTokensFromVariables(templateArguments!.ConvertKeys("<%", "%>"), template);
+            result = TokenHelper.ReplaceTokensFromVariables(templateArguments!.ConvertKeys("&lt;%", "%&gt;"), result); // the case when template is html encoded
             result = TokenHelper.ReplaceTokensFromVariables(templateArguments!.ConvertKeys("${", "}"), result);
             return result;
         }