Re: Security Bug (minor) : subscriber emails exposed

On Thu, 2004-11-04 at 08:58 +0000, David Greaves wrote:
> Hi
> I just noticed that if I subscribe to a page that others are subscribed 
> to, their emails are clearly visible in the To: list (and, presumably, 
> my email is in their To: list!)

Odd - is something rewriting your mail headers (sendmail used to do
nasty things like that)?

I've just checked back on messages I have received from my own Moin
instances (version 1.2.4) and from the main Moin site earlier this week
(so 1.3.whatever-beta-was-running-then), and both have From: and To:
addresses set to the same thing - the local wiki email address.  No sign
of other email addresses although I know both sets of pages have other
subscribers as well as myself.

	Nigel.

-- 
[ Nigel Metheringham           [email protected] ]
[ - Comments in this message are my own and not ITO opinion/policy - ]




-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click