Isn’t it a security issue for Discourse to trust the email address in the From header, and to use this as part of its validation of incoming emails? I can set the From header to whatever I like.
ChrisBeach
(Chris)
10
相关话题
| 话题 | 回复 | 浏览量 | 活动 | |
|---|---|---|---|---|
| Do not auto-create users when reply by mail | 2 | 1607 | 2017 年5 月 19 日 | |
| Confused by Error Message From Reply-by-Email | 26 | 3344 | 2020 年6 月 4 日 | |
| Reply by email - additional addresses | 28 | 2616 | 2019 年8 月 19 日 | |
| Issue configuring reply by email: 553 5.7.1 Sender address rejected: not owned by user | 6 | 12895 | 2019 年6 月 13 日 | |
| Difference between "reply by email address" and "alternative reply by email addresses" | 6 | 960 | 2022 年6 月 9 日 |