amorfo77/sogo

0 Fork 0

mirror of https://github.com/inverse-inc/sogo.git synced 2026-10-08 05:17:15 +00:00

Files

T

Hadrien Blanc 20779cf353 fix(mail): sanitize the domain part of generated message-ids

generateMessageID: appended the substring following the last '@'
without sanitizing it, so a sender value such as 'Doe, John <a@b>'
produced 'Message-Id: <uuid@b>>' with a duplicated closing bracket on
calendar invitations. A nil domain also left the message-id
unterminated.

The domain part is now cut at the first address delimiter or
whitespace - a domain is a single token, and anything else would
allow header injection through generated message-ids.

Fixes #6201

2026-10-07 11:13:33 +02:00

lib

chore(packaging): debian 12

2023-08-02 11:36:36 +02:00

spec

fix(tests): Add timeout on all async tests

2024-09-26 21:02:50 +02:00

Stress

Deleted old tests

2017-06-15 11:24:32 -04:00

Unit

fix(mail): sanitize the domain part of generated message-ids