Isn’t it a security issue for Discourse to trust the email address in the From header, and to use this as part of its validation of incoming emails? I can set the From header to whatever I like.
ChrisBeach
(Chris)
10
Связанные темы
| Тема | Ответов | Просм. | Активность | |
|---|---|---|---|---|
| Do not auto-create users when reply by mail | 2 | 1607 | 19.05.2017 | |
| Confused by Error Message From Reply-by-Email | 26 | 3344 | 04.06.2020 | |
| Reply by email - additional addresses | 28 | 2616 | 19.08.2019 | |
| Issue configuring reply by email: 553 5.7.1 Sender address rejected: not owned by user | 6 | 12895 | 13.06.2019 | |
| Difference between "reply by email address" and "alternative reply by email addresses" | 6 | 960 | 09.06.2022 |