[eluser]EugeneS[/eluser]
because of this bug i have to use Email class version from one of previous version where ive commented lines to avoid this injections (in most cases i dont need attachements)
this commenting help to solve the problem

)))
without attachements but with correct html email
hope in next CI version this problem will be solved.
Code:
case 'html' :
/*
$hdr .= "Content-Type: multipart/alternative; boundary=\"" . $this->_alt_boundary . "\"" . $this->newline;
$hdr .= $this->_get_mime_message() . $this->newline . $this->newline;
$hdr .= "--" . $this->_alt_boundary . $this->newline;
$hdr .= "Content-Type: text/plain; charset=" . $this->charset . $this->newline;
$hdr .= "Content-Transfer-Encoding: " . $this->_get_encoding() . $this->newline . $this->newline;
$hdr .= $this->_get_alt_message() . $this->newline . $this->newline . "--" . $this->_alt_boundary . $this->newline;
*/
$hdr .= "Content-Type: text/html; charset=" . $this->charset . $this->newline;
$hdr .= "Content-Transfer-Encoding: quoted-printable";
$this->_body = $this->_prep_quoted_printable($this->_body);
if ($this->_get_protocol() == 'mail')
{
$this->_header_str .= $hdr;
//$this->_finalbody = $this->_body . $this->newline . $this->newline . "--" . $this->_alt_boundary . "--";
$this->_finalbody = $this->_body . $this->newline . $this->newline;
return;
}
$hdr .= $this->newline . $this->newline;
//$hdr .= $this->_body . $this->newline . $this->newline . "--" . $this->_alt_boundary . "--";
$hdr .= $this->_body . $this->newline . $this->newline;
$this->_finalbody = $hdr;
return;
break;