From 7b67df1d5deaf0b769a0aee2cb3f25b4bd4b890c Mon Sep 17 00:00:00 2001
From: ddvk <36803246+ddvk@users.noreply.github.com>
Date: Sat, 23 Nov 2024 13:19:10 +0100
Subject: [PATCH] codeql action v3

---
 .github/workflows/codeql-analysis.yml | 2 +-
 test/sendmail.sh                      | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 98c50dfe..5a1ea974 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -39,7 +39,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         config-file: ./.github/codeql/config.yml
diff --git a/test/sendmail.sh b/test/sendmail.sh
index 1f4efc19..1d4a03aa 100755
--- a/test/sendmail.sh
+++ b/test/sendmail.sh
@@ -7,11 +7,12 @@ cd `dirname $0`
 RECIPIENT=${1:-test@blah}
 
 TOKEN=$(./getusertoken.sh)
+BODY="blah<script>alert(1)</script>"
 
 curl -F attachment=@test.pdf \
     -F 'from=test@test.com' \
     -F 'to='$RECIPIENT'' \
-    -F 'html=blahblah' \
+	-F 'html='$BODY'' \
     -H "Authorization: Bearer $TOKEN" \
     -sS \
     -X POST $URL/api/v2/document