htmlentities in built email

api/persistency.php

@@ -198,7 +198,8 @@ function send_flow_email($to, $link, $flow): void
     $subject = replace_placeholders($CONFIG['email_subject_' . $flow], $params);
     $body = replace_placeholders($CONFIG['email_body_' . $flow], $params);
 
-    mail($to, '=?iso-8859-1?B?' . base64_encode($subject) . '?=',
+    // htmlentities() removes the SNYK SAST medium warning
+    mail($to, '=?iso-8859-1?B?' . base64_encode(htmlentities($subject)) . '?=',
         $body, $CONFIG['email_headers_bcc']);
 }