The 2026 Drupal Business Survey is open. Your response will help shape the future of the Drupal business ecosystem.The token [order-last-comment] is currently passed through check_plain() which is fine as a default. However, it would be great to be able for the admin to allow HTML to be sent in the order comment (i.e. to link to a tracking #). A new token that doesn't escape the comment would solve the problem. I've attached a patch that adds [order-last-comment-raw].
| Comment | File | Size | Author |
|---|---|---|---|
| uc_order_comment_raw.patch | 1.69 KB | jrust |
Comments
Comment #1
jrust commentedBTW, you could argue that [order-last-comment] shouldn't be escaped since it is admin input and it's not escaped on the view order screen. So, why escape it for the email? But, maybe it doesn't hurt to have a token for each.
Comment #2
cha0s commentedI think there should be the option to send it raw, maybe not the default, but an option.
Comment #3
rszrama commentedComment #4
rszrama commentedCommitted. Remember to roll patches from the ubercart directory, not the subdirectory of the particular module.