From 723167937366b1b8d96e537fc9580ec1178fdad0 Mon Sep 17 00:00:00 2001
From: Daniel Jiang <jiangd@vmware.com>
Date: Tue, 9 Feb 2021 17:04:15 +0800
Subject: [PATCH] Use the Email address from DB instead of request (#14212)

This commit updates the controller for sending reset pwd Email,
to make it use the Email from DB query result.

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
---
 src/core/controllers/base.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/core/controllers/base.go b/src/core/controllers/base.go
index 7eb38c567..2dbef147a 100644
--- a/src/core/controllers/base.go
+++ b/src/core/controllers/base.go
@@ -230,7 +230,7 @@ func (cc *CommonController) SendResetEmail() {
 		60, settings.SSL,
 		settings.Insecure,
 		settings.From,
-		[]string{template.HTMLEscapeString(email)},
+		[]string{u.Email},
 		"Reset Harbor user password",
 		message.String())
 	if err != nil {