Gentlemen, Subject contains: <empty> as a mail rule criterion is accepted by SOGo Web Client and it creates an all-matching criterion in the Sieve script. A user of mine has unintentionally created such a rule which effectively lead to wholly unwanted forwarding of virtually all his emails to another user.
Steps to reproduce: SOGo 1.3.9 Preferences > Mail Options > + Filter name: f1 Mach any of the following rules: Subject contains: something meaningful Subject contains: <empty> Perform these actions: Forward the message to: [email protected] Click Save and Close twice. Unexpected behavior: The criterion Subject contains: <empty> is accepted silently by SOGo Web client and it results in the following Sieve script: if anyof (header :contains "subject" "something meaningful", header :contains "subject" "") { redirect "[email protected]"; keep; } Expected behavior: Hard to say what is expected here. When I -- being an IT professional -- consider the expected behavior of "contains" for the "" pattern, I find it pretty intuitive: yes, every string contains an empty string. What I see as a problem here, is that "no input" in the pattern field is silently interpreted as an empty string. I believe nobody expects an empty criterion to match everything. SOGo web client should at least warn what such an empty criterion does an it should offer an option to remove such a criterion. Thanks, Gazda -- [email protected] https://inverse.ca/sogo/lists
