著者: Jeremy Harris 日付: To: exim-users 題目: Re: [exim] Clarification on detainting in exim 4.94 router
On 28/01/2021 03:20, Adam via Exim-users wrote: > There's an issue here with $local_part. Isn't it detainted by the use of local_parts to only run this if $local_part was found in the file?
No. The "lookup" (in a general sense including, relevant here, a search in a list
that happens be one element that indirects to a file) done by the "localparts="
option sets a variable called "local_part_data" with an untainted value.
The variable "local_part" is unchanged, carrying tainted data.
> $local_part_data is blank.
At what point in the flow did you check this?
--
Cheers,
Jeremy