MailScanner Bug - Privacy Advisory

[Hugo van der Kooij]

On 02/07/10 17:24, Julian Field wrote:
> This only occurs if you choose to use the "$to" variable in your
> inline.spam.warning.txt.
> It is not present in the default templates I ship.
> 
> I would therefore suggest 2 things:
> 1. You remove the "Dear $to" line from your own inline.spam.warning.txt
> report file.
> 2. I remove "$to" from the list of available variables which can be used
> in that report file.

I suggest we keep the variable available.

The "privacy leakage" is a choice made by the administrator in this case.

Hugo.


-- 
hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc