[exim-dev] [Bug 2609] exim dkim stopped signing emails

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 2609] exim dkim stopped signing emails
https://bugs.exim.org/show_bug.cgi?id=2609

Jeremy Harris <jgh146exb@???> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |INVALID
             Status|NEW                         |RESOLVED


--- Comment #1 from Jeremy Harris <jgh146exb@???> ---
This is a configuration issue. You may not use $sender_address_domain directly
as part of the filename because it is supplied by a potential attacker.
You need to validate and de-taint this value first. Generally this means using
it as a key for lookup in some trusted information (database, file,
filesystem).

Search in the docs Concept Index for de-tainting.

--
You are receiving this mail because:
You are on the CC list for the bug.