Public bug reported:
If Content filtering accepts both message/rfc822 and
multipart/alternative MIME parts, and a message/rfc822 part contains a
message whose content type is multipart/alternative and
collapse_alternatives is Yes, the headers of the message in the
message/rfc822 part will be lost.
** Affects: mailman
Importance: Low
Assignee: Mark Sapiro (msapiro)
Status: In Progress
** Tags: mailman3
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/757062
Title:
Content filtering can remove the headers from a message/rfc822 part.
*** This bug is a security vulnerability ***
Private security bug reported:
We may have to set lifetime for input forms because of recent activities
on cross-site request forgery (CSRF). The form lifetime is successfully
deployed in frameworks like web.py or plone etc. Proposed branch
lp:~tkikuchi/mailman/form-lifetime implement lifetime in admin, admindb,
options and edithtml interfaces. Other forms like create and rmlist
have confirmation by password thus are safe regarding CSRF. The form
generation time is set by a hidden parameter whose value is calculated
following the mailman cookie algorithm. The default lifetime is set 1
hour in Default.py thus configurable by a site administrator. If a
password is set in request, authorization cookie is discarded so the
password authentication is forced. Wget tricks to manage list in FAQ
can be used as they are now.
** Affects: mailman
Importance: Undecided
Status: New
** Branch linked: lp:~tkikuchi/mailman/form-lifetime
--
You received this bug notification because you are a member of Mailman
Coders, which is a direct subscriber.
https://bugs.launchpad.net/bugs/775294
Title:
Set lifetime for input forms
Public bug reported:
When configured to hide email addresses. a mailman user should be able
to contact someone else by using a request contact form a profile page
representing a user. This form would email the recipient of the request
a short message explaining who is trying to get in contact, and the
email address of the user requesting contact.
** Affects: mailman
Importance: Undecided
Status: New
** Tags: wishlist
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1104498
Title:
Member contact requests
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1104498/+subscriptions
Public bug reported:
Some forms in admin interface, like the one on list member management --
https://HOSTNAME/mailman/admin/somelist/members -- , use absolute links
as the form action url.
POST data then gets transmitted in the clear because that absolute link
points to http instead of https address.
I'm running mailman 2.1.14
** Affects: mailman
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1279980
Title:
Some forms in list admin interfaces use absolute links in form action
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1279980/+subscriptions
Rajeev S has proposed merging lp:~rajeevs1992/mailman.client/mailmancli into lp:mailman.client.
Requested reviews:
Mailman Coders (mailman-coders)
For more details, see:
https://code.launchpad.net/~rajeevs1992/mailman.client/mailmancli/+merge/23…
GSoC project "Mailman CLI"
The branch contains the Mailman CLI shell as well as the command line tools built as a part of the GSoC 2014, Under the mentors Stephen J Turnbull, Abhilash Raj and Barry Warsaw.
--
https://code.launchpad.net/~rajeevs1992/mailman.client/mailmancli/+merge/23…
Your team Mailman Coders is requested to review the proposed merge of lp:~rajeevs1992/mailman.client/mailmancli into lp:mailman.client.
Public bug reported:
separate installation of zope interface 3.8.0 fixes the issue, afterwards mailman 3.0.0.8a
OS: Scientific Linux 6.1, Python 2.6.6
** Affects: mailman
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/889829
Title:
setup takes zope interface 3.5.1, but needs 3.8.0
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/889829/+subscriptions
Public bug reported:
Expose ILanguageManager as a REST resource, so that Postorius can use it
to learn what languages a system supports, and thus provide list
administrators with options for a list's preferred language. Refer to
src/mailman/model/docs/languages.rst -- I imagine this will probably use
a getUtility call to say,
getUtility(ILanguageManager)
Background, based on my conversation with Barry yesterday (I may have gotten some things wrong):
The system knows it supports certain languages. This is set in a config
file that only the site administrator can change -- a change in the
config file requires a mailman restart in order to take effect. The
Language Manager is per system.
The Language Manager is a utility, like the user manager (that is,
essentially a singleton in the system; interfaces that have multiple
implementations are not utilities). When the system boots up, it
registers implementations of interfaces. These are ZopeInterfaces, as we
use the Zope component architecture, ZCA.
** Affects: mailman
Importance: Undecided
Status: New
** Affects: postorius
Importance: Undecided
Status: New
** Tags: i18n mailman3 mailman3-suite-blocker
** Also affects: postorius
Importance: Undecided
Status: New
** Tags added: i18n mailman3-suite-blocker
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1414298
Title:
ILanguageManager should be exposed as a REST resource
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1414298/+subscriptions
Public bug reported:
Provide a better list-data export and import mechanism via XML.
*Possibly* allow for data export via the web.
This requires discussion and deciding which parts to implement in
Postorius and/or HyperKitty.
From
http://wiki.mailman.psf.io/DEV/Mailman%203.0?action=diff&rev2=30&rev1=28
-- a TODO for the Mailman 3.x series.
** Affects: mailman
Importance: Undecided
Status: New
** Affects: postorius
Importance: Undecided
Status: New
** Tags: mailman3
** Also affects: postorius
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1414176
Title:
better list-data export and import via XML, maybe web
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1414176/+subscriptions
Public bug reported:
Improve admin statistics gather (# of posts sent, # bounced, # of
domains accessed, which lists are quiet and which are busy) and make
these available via the REST interface so Postorius can use them.
From
http://wiki.mailman.psf.io/DEV/Mailman%203.0?action=diff&rev2=30&rev1=28
-- a TODO for the Mailman 3.x series.
** Affects: mailman
Importance: Undecided
Status: New
** Tags: mailman3
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1414169
Title:
gather and surface admin statistics
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1414169/+subscriptions