Re: [exim] 4.94 - De-tainting without lookup?

On 27/06/2020 12:51, Evgeniy Berdnikov via Exim-users wrote:
>> # directory must exist
> ^^^^^^^^^^^^^^^^^^^^^^^^
> The question is what to do if it does not exist? It's impossible to predict
> addressees of arbitrary mail list, so no way to create subdirs in advance.

Then you'll need to take specific action to create these directories
outside exim. I hope you impose suitable constraints (which your
previous method did not appear to, and a blind method for de-tainting
strings without actually validating them would still not).
--
Cheers,
Jeremy