Quick fix for trojan order exploit in 2.4.5-p1 and below

TrojanOrders-exploit.patch

--- a/vendor/magento/module-sales/Model/Order/Email/Sender.php
+++ b/vendor/magento/module-sales/Model/Order/Email/Sender.php
@@ -73,6 +73,20 @@
      */
     protected function checkAndSend(Order $order)
     {
+        $possibleExploitTags = ['{{', '}}', '()', '.()', 'base64_', 'this.', 'addAfterFilterCallback', '.filter', '.Filter', 'getTemplateFilter'];
+        $addressArray = $order->getAddressesCollection()->toArray()['items'];
+        $addressStringCombined = "";
+        foreach ($addressArray as $addressArrayItem) {
+            $addressStringCombined .= implode(' ', $addressArrayItem);
+        }
+
+        foreach ($possibleExploitTags as $possibleExploitTag) {
+            if (strstr($addressStringCombined, $possibleExploitTag) !== false) {
+                throw new \Exception('Possible exploit found for order ' . $order->getId() . '. Mail has not been sent.');
+                return false;
+            }
+        }
+
         $this->identityContainer->setStore($order->getStore());
         if (!$this->identityContainer->isEnabled()) {
             return false;