David Mudrák
61367eb639
MDL-57531 mail: Validate the sender's email address ...
The patch adds validation for the noreplyaddress setting variable, for
the explicit $replyto parameter and for the sender's email. In case of
misconfigured noreplyaddress setting, it falls back to the default
noreply address value. In case of invalid email in the user's record,
the email is not sent.
The patch also adds unit test for the value returned by the function
generate_email_processing_address() so that it can be considered as a
valid email, too.
This is supposed to significantly minimise the risk of exploiting the
vulnerability in PHPMailer's Sender field.
2017-01-04 12:35:19 +01:00
2016-10-05 10:58:10 +08:00
2016-11-15 12:44:59 +08:00
2016-12-01 14:44:00 +08:00
2016-12-05 17:10:20 +01:00
2016-12-08 09:18:39 +08:00
2016-12-19 15:05:14 +01:00
2016-12-05 17:10:20 +01:00
2016-07-06 14:45:00 +10:00
2016-12-01 22:08:57 +00:00
2016-12-14 09:37:35 +08:00
2016-07-26 10:11:30 +08:00
2016-08-01 09:12:36 +08:00
2016-11-07 16:19:06 +01:00
2016-12-12 12:38:04 +08:00
2016-11-07 14:35:16 +08:00
2016-05-18 11:37:17 +08:00
2016-10-20 17:52:32 +02:00
2016-10-04 11:16:29 +01:00
2016-10-28 10:10:43 +08:00
2016-09-19 08:59:38 +01:00
2016-10-10 13:17:04 +01:00
2016-10-14 08:31:23 +01:00
2016-07-20 12:55:09 +08:00
2016-10-13 09:18:34 +08:00
2016-09-23 10:53:30 +01:00
2016-09-29 15:09:10 +08:00
2016-11-08 15:11:15 +08:00
2016-10-28 11:56:42 +08:00
2016-11-21 08:57:53 +08:00
2016-09-23 10:49:49 +01:00
2016-09-23 10:49:49 +01:00
2016-10-06 11:51:28 +02:00
2016-10-04 10:47:06 +08:00
2016-12-20 10:02:06 +00:00
2016-10-30 13:42:43 +11:00
2017-01-04 12:35:19 +01:00
2016-09-14 13:48:38 +10:00
2016-06-08 11:06:16 +10:00
2016-12-20 10:02:06 +00:00
2016-11-24 15:11:19 +08:00
2016-11-09 11:32:58 +08:00
2016-11-23 19:35:08 +00:00
2016-11-07 15:56:26 +10:30
2016-12-19 15:46:54 +00:00
2016-07-19 14:44:51 +08:00
2016-11-07 07:41:59 +08:00
2016-08-03 09:05:55 +08:00
2016-11-16 08:59:15 -08:00
2016-11-02 09:50:34 +00:00
2016-09-29 16:40:40 +01:00
2016-04-21 16:20:36 +08:00
2016-10-17 11:08:20 +08:00
2016-11-17 09:11:37 +08:00
2016-11-15 12:22:54 +00:00
2016-11-11 12:37:07 +08:00
2016-11-10 16:15:31 +08:00
2016-11-08 15:11:15 +08:00
2016-12-06 14:12:42 +08:00
2016-12-05 11:27:05 +11:00
2016-08-15 10:54:28 +08:00
2016-10-25 10:10:52 +01:00
2016-09-30 09:27:59 +01:00
2016-06-10 08:06:49 +10:00
2016-11-04 17:30:40 +08:00
2016-10-10 13:17:04 +01:00
2016-05-10 23:04:46 +08:00
2016-11-04 17:30:40 +08:00
2016-11-16 10:22:52 +08:00
2016-11-07 07:41:59 +08:00
2017-01-04 12:35:19 +01:00
2016-10-05 15:08:38 +01:00
2016-12-13 11:42:11 +08:00
2016-10-10 14:02:20 +08:00
2016-07-29 08:15:16 +08:00
2016-09-23 10:55:16 +01:00
2016-12-20 10:02:05 +00:00
2016-11-15 12:44:59 +08:00
2016-12-09 08:46:27 +00:00
2016-12-19 12:23:54 +00:00
2016-09-23 10:49:48 +01:00
2016-12-01 14:51:40 +08:00
2016-06-10 08:06:49 +10:00
2016-11-11 12:39:35 +00:00
2016-11-17 14:20:52 +08:00
2016-10-04 09:49:27 +01:00
2016-08-03 10:18:41 -07:00
2016-06-10 08:06:49 +10:00
2016-08-22 09:20:32 +10:00
2016-11-17 08:56:54 +08:00
2016-11-23 11:50:26 +08:00
2016-08-18 10:13:31 +08:00
2016-12-08 15:02:04 +11:00
2016-11-04 17:30:40 +08:00
2016-12-20 10:02:06 +00:00
2016-11-29 11:46:06 +08:00
2016-11-16 17:19:19 +08:00
2016-11-14 15:16:09 +08:00
61367eb639