From f39a5284ee208a8ba8194b4317b77114e38d73d9 Mon Sep 17 00:00:00 2001 From: Ruben Pollan Date: Mon, 1 Aug 2016 18:51:08 +0200 Subject: [feat] Remove senders X-Leap-* headers if the email came with them We use the X-Leap-Signature and X-Leap-Encryption to signal the signature and encryption status of emails. An attacker could add this headers and trick bitmask to believe that the email was signed and/or encrypted. Now we remove this headers from the original email if they are present before adding ours. - Resolves: #7429 --- changes/next-changelog.rst | 1 + 1 file changed, 1 insertion(+) (limited to 'changes') diff --git a/changes/next-changelog.rst b/changes/next-changelog.rst index 21b1010..2731460 100644 --- a/changes/next-changelog.rst +++ b/changes/next-changelog.rst @@ -11,6 +11,7 @@ I've added a new category `Misc` so we can track doc/style/packaging stuff. Features ~~~~~~~~ - `#8031 `_: Adapt to the new KeyManager API without key types. +- `#7429 `_: Remove senders X-Leap-* headers if the email came with them. - `#1234 `_: Description of the new feature corresponding with issue #1234. - New feature without related issue number. -- cgit v1.2.3