Re: Security Bug (minor) : subscriber emails exposed
David Greaves <[email protected]> Thu, 04 Nov 2004 16:09:37 +0000
| Newsgroups | gmane.comp.web.wiki.moin.devel |
|---|---|
| Message-ID | <[email protected]> |
Thomas Waldmann wrote: > >> I just noticed that if I subscribe to a page that others are >> subscribed to, their emails are clearly visible in the To: list (and, >> presumably, my email is in their To: list!) > > > We noticed that, too, a while ago and fixed it before 1.2.4 release. > > So this shouldn't happen in moin 1.2.4. > >> Maybe all emails should be bcc'ed. > > > They are - since 1.2.4 the "from" address is also used as (fake, > not real) "to" address and all others are bcced. OK, I'm still on 1.2.3 - glad it's OK in 1.2.4 :) Ta David ------------------------------------------------------- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click