Re: [exim] Exim filters in virtual hosting environments

On Wed, 6 Jul 2005, Brian Candler wrote:

> I'm uncomfortable with that, as there may be unforeseen security holes.
> Currently there's no way to block out ${stat}, for example.

There probably ought to be. Noted.

> [Aside: perhaps forbid_filter_existstest ought to block out ${stat} too? ]

Maybe. :-)

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.
Get the Exim 4 book:    http://www.uit.co.uk/exim-book