Re: Security Bug (minor) : subscriber emails exposed

Thomas Waldmann <[email protected]> Thu, 04 Nov 2004 16:29:43 +0100
Newsgroups gmane.comp.web.wiki.moin.devel
Message-ID <[email protected]>
> I just noticed that if I subscribe to a page that others are subscribed 
> to, their emails are clearly visible in the To: list (and, presumably, 
> my email is in their To: list!)

We noticed that, too, a while ago and fixed it before 1.2.4 release.

So this shouldn't happen in moin 1.2.4.

> Maybe all emails should be bcc'ed.

They are - since 1.2.4 the "from" address is also used as (fake,
not real) "to" address and all others are bcced.


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click