Files
sogo/SoObjects/Mailer
Hadrien Blanc 20779cf353 fix(mail): sanitize the domain part of generated message-ids
generateMessageID: appended the substring following the last '@'
without sanitizing it, so a sender value such as 'Doe, John <a@b>'
produced 'Message-Id: <uuid@b>>' with a duplicated closing bracket on
calendar invitations. A nil domain also left the message-id
unterminated.

The domain part is now cut at the first address delimiter or
whitespace - a domain is a single token, and anything else would
allow header injection through generated message-ids.

Fixes #6201
2026-10-07 11:13:33 +02:00
..
2019-07-19 12:50:18 -04:00
2019-07-19 12:50:18 -04:00
2026-03-02 15:01:52 +01:00
2019-07-19 12:50:18 -04:00
2019-07-19 12:50:18 -04:00
2019-07-19 12:50:18 -04:00
2019-10-23 12:54:32 -04:00
2019-07-19 12:50:18 -04:00
2025-07-03 16:59:56 +02:00
2017-12-23 05:15:39 -05:00
2022-01-21 16:24:13 -05:00
2017-12-23 04:49:57 -05:00
2017-12-23 04:49:25 -05:00
2017-12-23 04:51:06 -05:00
2015-11-04 07:24:02 +08:00
2018-01-04 10:44:15 -05:00
2018-01-04 10:44:15 -05:00