// Copyright 2026 Arctel.net // SPDX-License-Identifier: Apache-2.0 package push import ( "Wavelet/pkg/util" "context" "errors" "fmt" "net" "net/smtp" "strings" ) func init() { Register("email", &EmailPusher{}) } // EmailPusher 极简 SMTP 邮件推送实现 (静态、解耦) type EmailPusher struct{} // sanitizeEmailHeader removes CR/LF bytes so untrusted values cannot inject // additional email headers (email header injection). func sanitizeEmailHeader(v string) string { v = strings.ReplaceAll(v, "\r", "") v = strings.ReplaceAll(v, "\n", "") return v } // Send 发送邮件 func (p *EmailPusher) Send(ctx context.Context, cfg Config, target string, body map[string]any, _ string, ext map[string]any) (string, error) { if cfg.URL == "" || cfg.Key == "" || cfg.Secret == "" { return "", errors.New("email: SMTP configuration (url, key, secret) is incomplete") } if target == "" { return "", errors.New("email: target email address is required") } title := bodyTitle(body) content := bodyContent(body, "
%s: %v
", "") // 邮件头和体 from := cfg.Key to := target // 如果 ext 中指定了 from_name,我们在 From 头部包含它 fromName := "System Notification" if ext != nil { if fn, ok := ext["from_name"].(string); ok && fn != "" { fromName = fn } } subjectHeader := fmt.Sprintf("Subject: %s\r\n", sanitizeEmailHeader(title)) fromHeader := fmt.Sprintf("From: %s <%s>\r\n", sanitizeEmailHeader(fromName), sanitizeEmailHeader(from)) toHeader := fmt.Sprintf("To: %s\r\n", sanitizeEmailHeader(to)) mimeHeader := "MIME-version: 1.0;\r\nContent-Type: text/html; charset=\"UTF-8\";\r\n\r\n" // 拼装完整的邮件报文 // 简单的 HTML 正文渲染 htmlBody := fmt.Sprintf(`