Clarify example of placeholder in the email rule page
What changed, and why it matters
This commit only updates a user-facing help message in the email rules page. It adds a second example placeholder ({Subscriber.Metadata.accessKey}) alongside the existing one ({Invoice.Metadata.itemCode}) to make the documentation clearer. There is no code behavior change and no security relevance.
No security action needed. This is a documentation/clarification change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
A single line in BTCPayServer/Plugins/Emails/Views/Shared/EmailRulesManage.cshtml was changed to expand the placeholder syntax example. The underlying functionality, JSONPath token selection via Newtonsoft.Json, is untouched. No input validation, output encoding, authorization, or business logic changed.
Changed components
BTCPayServer/Plugins/Emails/Views/Shared/EmailRulesManage.cshtmlInspect captured patch +1 / −1
diff --git a/BTCPayServer/Plugins/Emails/Views/Shared/EmailRulesManage.cshtml b/BTCPayServer/Plugins/Emails/Views/Shared/EmailRulesManage.cshtml
index 7952ded..29dc960 100644
--- a/BTCPayServer/Plugins/Emails/Views/Shared/EmailRulesManage.cshtml
+++ b/BTCPayServer/Plugins/Emails/Views/Shared/EmailRulesManage.cshtml
@@ -131,7 +131,7 @@
<h6 class="text-muted p-0" text-translate="true">Placeholders</h6>
<table id="placeholders" class="table">
</table>
- <span>* These fields are JSON objects. You can access properties within them using <a href="https://www.newtonsoft.com/json/help/html/SelectToken.htm#SelectTokenJSONPath" rel="noreferrer noopener" target="_blank">this syntax</a>. One example is <code>{Invoice.Metadata.itemCode}</code></span>
+ <span>* These fields are JSON objects. You can access properties within them using <a href="https://www.newtonsoft.com/json/help/html/SelectToken.htm#SelectTokenJSONPath" rel="noreferrer noopener" target="_blank">this syntax</a>. For example <code>{Invoice.Metadata.itemCode}</code> or <code>{Subscriber.Metadata.accessKey}</code></span>
</div>
</div>
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.