Hello.
On Thu, May 11, 2023 at 09:31:49AM +0100, Gary Stainburn via Exim-users wrote:
> I know how to untaint $local_part and $domain using lookups, but I have no
> idea how to untaint $sender.
...
> dovecot_delivery:
> driver = pipe
>
> # Use /usr/lib/dovecot/dovecot-lda if using Debian's package.
> # You may or may not want to add -d $local_part@$domain depending on if
> you need a userdb lookup done.
> command = /usr/local/libexec/dovecot/dovecot-lda -f $sender_address
What about proposal in 1st comment to strip out "-f $sender_address"?
IMHO, dovecot-lda doesn't need sender address. Unless sieve is used,
with explicit reference to sender address.
--
Eugene Berdnikov
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/
