#28 Ticket notifications disclose author email

Launch
closed
Rui Ferreira
private (2)
2014-03-12
2013-04-11
Rui Ferreira
No
0 up votes | 0 down votes | 0%
4 comments

When a notification is sent, e.g. from a subscribed ticket, the author of the email is the user that created the ticket.

The from field of the email, should most likely be the same address as the reply addr.

Discussion

  • Rui Ferreira
    Rui Ferreira
    2013-04-11

    This could probably be address by passing None as the fromaddr to either sendmail() or sendsimplemail() - however the fallback hardcoded email address is not correct right now - Allura/allura/tasks/mail_tasks.py.

     
    Link

  • Carla Leite
    Carla Leite
    2013-04-16

    • assigned_to: Rui Ferreira
     
    Link

  • Rui Ferreira
    Rui Ferreira
    2013-04-22

    This is now fixed, the From: header is now noreply@opensourceprojects.eu

     
    Link

  • Rui Ferreira
    Rui Ferreira
    2013-04-22

    • status: open --> closed
     
    Link