diff --git a/plugins/endpoints/api/routes.py b/plugins/endpoints/api/routes.py index f407e7d8..f29ab32c 100644 --- a/plugins/endpoints/api/routes.py +++ b/plugins/endpoints/api/routes.py @@ -2984,8 +2984,8 @@ def _send_operator_report_alert(report, asset_id, hostname): # HTML-escape all user-controlled values to prevent XSS safe_hostname = escape(hostname) - safe_computername = escape(asset.computername or hostname) - safe_assettag = escape(asset.assettag or 'N/A') + safe_name = escape(asset.name or hostname) + safe_assetnumber = escape(asset.assetnumber or 'N/A') safe_reason = escape(report.reason) safe_details = escape(report.details or 'No additional details provided.') @@ -2995,8 +2995,8 @@ def _send_operator_report_alert(report, asset_id, hostname):
New Issue Report from Shop Floor
-Device: {safe_computername} ({safe_hostname})
-Asset Tag: {safe_assettag}
+Device: {safe_name} ({safe_hostname})
+Asset Number: {safe_assetnumber}
Reason: {safe_reason}
Reported: {escape(reported_at)}