[exim-dev] [Bug 2601] New: Taint for $sender_address_domain?

Wed, 17 Jun 2020 03:17:22 -0700 

https://bugs.exim.org/show_bug.cgi?id=2601

            Bug ID: 2601
           Summary: Taint for $sender_address_domain?
           Product: Exim
           Version: 4.94
          Hardware: x86-64
                OS: All
            Status: NEW
          Severity: bug
          Priority: medium
         Component: Filters
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]

Should this case be affected by taint?

13:03:28 2686  ╭considering: $sender_address_domain:
13:03:28 2686  ├──expanding: $sender_address_domain:
13:03:28 2686  ╰─────result: domain.com:
13:03:28 2686       ╰──(tainted)

It's simply this in system filter:
if $sender_address_domain: is

message body is formed by the sender too, but.. it's not tainted. So, I think
it might be a bug?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim 
details at http://www.exim.org/ ##

Reply via email to