fix(gmail): sanitize attachment mimeType in Content-Type header

attachment.mimeType was written verbatim into the Content-Type header,
leaving the same CRLF-injection path the rest of the PR closes.

Author: waleedlatif1

apps/sim/tools/gmail/utils.test.ts

@@ -283,6 +283,25 @@ describe('buildMimeMessage', () => {
     )
   })
 
+  it('strips embedded CRLF from the attachment mimeType', () => {
+    const injected = 'text/plain\r\nBcc: attacker@example.com'
+    const message = buildMimeMessage({
+      to: 'a@example.com',
+      body: 'hello',
+      attachments: [
+        {
+          filename: 'note.txt',
+          mimeType: injected,
+          content: Buffer.from('hi'),
+        },
+      ],
+    })
+    const lines = message.split('\n')
+    const bccLines = lines.filter((line) => line.startsWith('Bcc:'))
+    expect(bccLines).toHaveLength(0)
+    expect(message).toContain('Content-Type: text/plain Bcc: attacker@example.com')
+  })
+
   it('preserves legitimate ASCII, Unicode, and multi-recipient values unchanged', () => {
     const message = buildMimeMessage({
       to: 'a@example.com, b@example.com',

apps/sim/tools/gmail/utils.ts

@@ -533,7 +533,7 @@ export function buildMimeMessage(params: BuildMimeMessageParams): string {
 
     for (const attachment of attachments) {
       messageParts.push(`--${mixedBoundary}`)
-      messageParts.push(`Content-Type: ${attachment.mimeType}`)
+      messageParts.push(`Content-Type: ${sanitizeHeaderValue(attachment.mimeType)}`)
       messageParts.push(
         `Content-Disposition: attachment; filename="${sanitizeHeaderValue(attachment.filename)}"`
       )