xss validation

internal/inquiry/service.go

@@ -7,6 +7,7 @@ import (
 	"tm/pkg/logger"
 	"tm/pkg/notification"
 	"tm/pkg/response"
+	"tm/pkg/security"
 )
 
 // Service defines business logic for inquiry operations
@@ -23,14 +24,16 @@ type inquiryService struct {
 	repository Repository
 	sdk        notification.SDK
 	logger     logger.Logger
+	xssPolicy  *security.XSSPolicy
 }
 
 // NewService creates a new inquiry service
-func NewService(repository Repository, sdk notification.SDK, logger logger.Logger) Service {
+func NewService(repository Repository, sdk notification.SDK, logger logger.Logger, xssPolicy *security.XSSPolicy) Service {
 	return &inquiryService{
 		repository: repository,
 		sdk:        sdk,
 		logger:     logger,
+		xssPolicy:  xssPolicy,
 	}
 }
 
@@ -114,7 +117,7 @@ func (s *inquiryService) Create(ctx context.Context, form *CreateInquiryForm) (*
 			CompanyLogo:  "",
 			CompanyURL:   "https://opplens.com",
 			SupportEmail: "info@opplens.com",
-		}),
+		}, s.xssPolicy),
 		Type:      "alert",
 		Priority:  "important",
 		EventType: notification.EventTypeEmail,
@@ -137,7 +140,7 @@ func (s *inquiryService) Create(ctx context.Context, form *CreateInquiryForm) (*
 			CompanyLogo:  "",
 			CompanyURL:   "https://opplens.com",
 			SupportEmail: "info@opplens.com",
-		}),
+		}, s.xssPolicy),
 		Type:      "alert",
 		Priority:  "important",
 		EventType: notification.EventTypeEmail,