Page MenuHomePhabricator

Allow insecure mail auth with "Reply-To" header
ClosedPublic

Authored by epriestley on Aug 21 2011, 7:06 PM.
Tags
None
Referenced Files
F15464142: D842.id1503.diff
Wed, Apr 2, 6:42 AM
F15460810: D842.id.diff
Tue, Apr 1, 2:30 AM
F15447403: D842.id1503.diff
Thu, Mar 27, 11:35 PM
F15441826: D842.id.diff
Wed, Mar 26, 8:13 PM
F15436056: D842.diff
Tue, Mar 25, 11:42 AM
F15412107: D842.diff
Wed, Mar 19, 11:19 AM
Unknown Object (File)
Feb 15 2025, 9:46 AM
Unknown Object (File)
Feb 15 2025, 9:46 AM
Subscribers

Details

Reviewers
aran
jungejason
tuomaspelkonen
Maniphest Tasks
Restricted Maniphest Task
Commits
rPd1134810d616: Allow insecure mail auth with "Reply-To" header
Summary

Quora wants to handle some moderation tasks with Phabricator, but want to lower the barrier to entry for the install and let moderators adopt it gradually. One request is to allow auth rules to be relaxed so we can auth based on Reply-To to make things easier. This is insecure if configured but not really a big deal and the patch isn't big or complicated.

Test Plan

Sent a test email with bogus "From" but valid "Reply-To". It was rejected with this setting off, and allowed with this setting on.

Diff Detail

Branch
replyto
Lint
Lint Passed
Unit
No Test Coverage