Re: exim4 untainting and mailman does not work

On Sun, 26 Oct 2025, Marc MERLIN via Exim-users wrote:

> So, I finally did the exim4 upgrade that brought tainting and has now
> broken my mailman config.

Note that tainting was introduced in one version and
later exended. You might as well ensure your config works
with the latest version.

> I understand why tainting and the basics, but in the case of the mailman
> transport I wrote 20+ years ago, it is safe and I'd like to untaint
> local_part.
>
> Note that require_files encsures that local_part can't be random crap
> or the filematch would fail and the transport would never be called.
> Still, I tried to untaint with address_data and pass it to transport,
> but it's still tainted

Did you try using $local_part_data ?
That is an untainted copy of $local_part that is *usually* available.
Similarly there is $sender_address_data.

-- 
Andrew C. Aitchison                      Kendal, UK
                    [email protected]

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/