diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2022-04-30 23:57:33 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2022-04-30 23:57:33 +0100 |
| commit | 7bdf04110b214bd964cd1b99894c42d089f40851 (patch) | |
| tree | 4961d140ec52d477da4c32fea8d3a49e88649437 /doc | |
| parent | 509a8839d50d1e688b794975378214cc201a9697 (diff) | |
Taint: generate detainted $domain_data & $local_part_data from Rverify callout
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/doc-docbook/spec.xfpt | 9 | ||||
| -rw-r--r-- | doc/doc-txt/NewStuff | 3 |
2 files changed, 12 insertions, 0 deletions
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index ef8fc6836..b6fd9e10f 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -33620,6 +33620,15 @@ output before performing a callout in an ACL, to avoid unexpected timeouts in clients when the SMTP PIPELINING extension is in use. The flushing can be disabled by using a &%control%& modifier to set &%no_callout_flush%&. +.new +.cindex "tainted data" "de-tainting" +.cindex "de-tainting" "using receipient verify" +A recipient callout which gets a 2&'xx'& code +will assign untainted values to the +&$domain_data$& and &$local_part_data$& variables, +corresponding to the domain and local parts of the recipient address. +.wen + diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff index 11004e33a..2986b2cdd 100644 --- a/doc/doc-txt/NewStuff +++ b/doc/doc-txt/NewStuff @@ -27,6 +27,9 @@ Version 4.96 the expansion of the "true" result of the ${if}. With a static list, this can be used for de-tainting. + 8. Recipient verify callouts now set $domain_data & $local_part_data, with + de-tainted values. + Version 4.95 ------------ |