Re: Untaint $local_part, $domain and other variables
Andrew C Aitchison via Exim-users <[email protected]>
| Newsgroups | gmane.mail.exim.user |
|---|---|
| Message-ID | <[email protected]> |
On Sun, 14 Sep 2025, Emilio Augusto Lazo Zaia via Exim-users wrote:
> I'm seeking assistance with passing sanitized variables to a script at the
> transport level. Specifically, I need to pass $local_part@$domain,
Use
$local_part_data@$domain_data
Technically you need to ensure that something has happened before they get
filled in; see "check_local_users", "10.1 Results of list checking" and
"10.3 Domain lists", but in many cases this will have happened anyway.
> $sender_address, $sender_host_address, and $sender_address_domain to the
> script.
"11.9 Expansion variables" suggests that $sender_host_address is not
tainted and that $sender_data will be set and untainted by some sender
lookups.
--
Andrew C. Aitchison Kendal, UK
[email protected]
--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/