Skip to content
Snippets Groups Projects
Commit 2664c427 authored by rswindell's avatar rswindell
Browse files

Strip control characters from email header fields. They shouldn't be in there.

SPAMMERS insert these either intentionally or mistakenly and they can defeat
security checks (like mailauth.js).
parent df9e3df7
No related branches found
No related tags found
No related merge requests found
......@@ -3432,6 +3432,7 @@ static void smtp_thread(void* arg)
continue;
}
/* RFC822 Header parsing */
strip_ctrl(buf, buf); /* There should be no control characters in header fields */
if(startup->options&MAIL_OPT_DEBUG_RX_HEADER)
lprintf(LOG_DEBUG,"%04d SMTP %s",socket, buf);
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment