[serendipity-cvs] [s9y/Serendipity] b38a90: Fix possible mail header injection attack by not u...

onli via php-blog-cvs <[email protected]> Mon, 06 Apr 2026 01:11:11 -0700

Newsgroups	gmane.comp.serendipity.cvs
Message-ID	<s9y/Serendipity/push/refs/heads/fix/emailHostInjection/[email protected]>

  Branch: refs/heads/fix/emailHostInjection
  Home:   https://github.com/s9y/Serendipity
  Commit: b38a9098251f07ac05656fb8408acfa3f76497aa
      https://github.com/s9y/Serendipity/commit/b38a9098251f07ac05656fb8408acfa3f76497aa
  Author: onli <[email protected]>
  Date:   2026-03-26 (Thu, 26 Mar 2026)

  Changed paths:
    M include/functions.inc.php

  Log Message:
  -----------
  Fix possible mail header injection attack by not using HTTP_HOST
Rely on the configured $serendipity['baseURL'] instead, with additional safeguards for the baseURL autodection mode



To unsubscribe from these emails, change your notification settings at https://github.com/s9y/Serendipity/settings/notifications