Re: [exim] tainted data issues

On 23/11/2020 14:20, Gary Stainburn via Exim-users wrote:
>   data = ${lookup{$local_part}lsearch{/etc/aliases.d/$domain}}

Don't use a tainted name as the filename for that lsearch.

Assuming that not doing the lsearch when the file doesn't exist
is what you want: use a dsearch in that directory to verify
that the file exists. Use the "return whole path" variant, so
that you can just feed that to lsearch.
--
Cheers,
Jeremy