Foodsoft/foodsoft
1
1
Fork 0
Code Issues 36 Pull requests 5 Projects 1 Releases Wiki Activity

Avoid disclosure of internal hostname via Message-ID header of mails

Browse source 
Use the host of default_url_options for generating that header instead.
This commit is contained in:
Patrick Gansterer 2017-08-18 00:52:34 +02:00
parent 3f7efbc4b9
commit d93aa23d1c
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
app/mailers/mailer.rb
View file

@ -76,6 +76,7 @@ class Mailer < ActionMailer::Base
end end
def mail(args) def mail(args)
args[:message_id] = "#{Mail.random_tag}@#{default_url_options[:host]}" unless args[:message_id]
args[:subject] = "[#{FoodsoftConfig[:name]}] #{args[:subject]}" args[:subject] = "[#{FoodsoftConfig[:name]}] #{args[:subject]}"
if args[:from].is_a? User if args[:from].is_a? User