fix Mailu#3252

nextgens · May 10, 2024 · 736fad1 · 736fad1
1 parent d90ecae
commit 736fad1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/core/admin/mailu/internal/views/postfix.py b/core/admin/mailu/internal/views/postfix.py
@@ -110,6 +110,8 @@ def postfix_recipient_map(recipient):
 
  This is meant for bounces to go back to the original sender.
  """
+ if recipient.count('@') > 1 or recipient.startswith('"'):
+ return flask.abort(404)
  srs = srslib.SRS(flask.current_app.srs_key)
  if srslib.SRS.is_srs_address(recipient):
  try:

diff --git a/towncrier/newsfragments/3252.bugfix b/towncrier/newsfragments/3252.bugfix
@@ -0,0 +1 @@
+Ensure that sending emails to invalid addresses with an '@' in localpart is permanently and not temporarily rejected.