Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bug: CRLF injection scan missing for dispositionNotificationTo and returnReceiptTo #410

Closed
bbottema opened this issue Jul 28, 2022 · 1 comment
Closed

Bug: CRLF injection scan missing for dispositionNotificationTo and returnReceiptTo #410

bbottema opened this issue Jul 28, 2022 · 1 comment
Labels
Priority-Low security
Milestone
7.5.0

Comments

@bbottema
Copy link
Owner

The name and address of these recipients are missing in the scan.
@bbottema bbottema added this to the 7.5.0 milestone Jul 28, 2022
@bbottema bbottema changed the title CRLF injection scan missing for dispositionNotificationTo and returnReceiptTo Bug: CRLF injection scan missing for dispositionNotificationTo and returnReceiptTo Jul 28, 2022
bbottema added a commit that referenced this issue Jul 28, 2022
@bbottema
#410: added missing CRLF injection checks for disposition-notificatio…
cad2b7a 
…n-to and return-receipt-to recipients (if provided in the email)
@bbottema
Copy link
Owner Author

Released in 7.5.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Priority-Low security
Projects
None yet
Milestone
7.5.0
Development

No branches or pull requests
1 participant
@bbottema