Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

FIX: ignore PGP data in emails by MIME type 

New version of Thunderbird email client reimplemented PGP support. Now the following attachments are added by default, if email signatures are enabled:

* OpenPGP_0x(pgp key id).asc
* OpenPGP_signature(.asc)

The last one has `name="OpenPGP_signature.asc"` in `Content-Type` but `filename="OpenPGP_signature"` (without extension) in `Content-Disposition: attachment`.

Since both the key and the signature have proper MIME types, filter them by default.
This commit is contained in:
ValdikSS 2020-10-24 16:48:16 +03:00 committed by Robin Ward
parent f2a17feb3a
commit 1031915b75
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/site_settings.yml
View File

@ -1149,7 +1149,7 @@ email:
max: 36500
blocked_attachment_content_types:
type: list
default: "pkcs7|x-vcard"
default: "pkcs7|x-vcard|pgp-keys|pgp-signature"
list_type: compact
blocked_attachment_filenames:
type: list