[ mailman-Bugs-998609 ] can subscribe with CR+LF in email address

SourceForge.net noreply at sourceforge.net
Tue Jul 27 12:13:42 CEST 2004


Bugs item #998609, was opened at 2004-07-27 12:13
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=998609&group_id=103

Category: (un)subscribing
Group: 2.1 (stable)
Status: Open
Resolution: None
Priority: 5
Submitted By: Thomas Arendsen Hein (thomas_ah)
Assigned to: Nobody/Anonymous (nobody)
Summary: can subscribe with CR+LF in email address

Initial Comment:
With Mailman 2.1.3 (didn't test with newer versions) it
is possible to subscribe with an email address which
ends with CR+LF.

A browser bug made it possible to enter this into the
single line entry field, but Mailman should check this.
A quick test shows that CR+LF is possible in the middle
of an email address, too, but of course this only works
when confirmation check is disabled.

Unsubscribing or changing the email address wasn't
possible, because there are checks against this strange
address. Only manually removing all dictionary entries
with 'withlist' helped.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=998609&group_id=103


More information about the Mailman-coders mailing list