Re: [exim] Taint mismatch, string_nextinlist: acl_check_con…

On 04/06/2020 04:38, list2--- via Exim-users wrote:
> set acl_m0       = $local_part@$domain
>
>
> warn     spam    = $acl_m0:true
>      add_header  = X-Spam-Report: $spam_report


Either:

a) pick up commit 12b7f811de from git and rebuild your exim

or

b) use checked, untainted variables to build $acl_m0
rather than $local_part and $domain.
(Look for "de-tainting" in the Concept Index of the docs)
--
Cheers,
Jeremy