# Default subject exposes email address of sender

**URL:** https://meta.discourse.org/t/default-subject-exposes-email-address-of-sender/50700
**Category:** Bug
**Created:** [2016年九月27日 02:06 UTC](https://meta.discourse.org/t/default-subject-exposes-email-address-of-sender/50700 "2016-09-27T02:06:48Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![scombs](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/scombs/32/48616_2.png) [@scombs](https://meta.discourse.org/u/scombs)
#### Post date: [2016年九月27日 02:06 UTC](https://meta.discourse.org/t/default-subject-exposes-email-address-of-sender/50700/1 "2016-09-27T02:06:48Z")

</div>

If a user posts a new topic via email but forgets to include a subject, the default subject posted on the site and in email notifications is **Incoming email from %{email}** This exposes a user’s email to everyone.

### Proposed solutions

- Changing the default text for the subject to **This topic needs a subject** or
- Reject email with an error message to user

### Work around

- Modify the text Admin \> Customize \> Text Content for “emails.incoming.default\_subject” from **Incoming email from %{email}** to **This topic needs a subject**

I honestly thought we had a user who just liked announcing his email address to everyone, until I accidentally posted via email with no subject line 🙂

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2016年九月27日 05:24 UTC](https://meta.discourse.org/t/default-subject-exposes-email-address-of-sender/50700/2 "2016-09-27T05:24:52Z")

</div>

We should fix this @tgxworld perhaps just edit the default string.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2017年一月19日 20:56 UTC](https://meta.discourse.org/t/default-subject-exposes-email-address-of-sender/50700/4 "2017-01-19T20:56:58Z")

</div>

Ok changed to

`default_subject: "This topic needs a title"`

great suggestion, thanks!

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2017年一月19日 20:59 UTC](https://meta.discourse.org/t/default-subject-exposes-email-address-of-sender/50700/5 "2017-01-19T20:59:49Z")

</div>