|take values "fail" or "restrict").  Note that S-nail also supports
 |a -. option, which forcefully turns on send mode and ends option
 |processing, so that anything in between -. and -- is treated as
 |recipients for To:, and only.

And note i explicitly mention this "-. RCV1 RCV2" because other
people on this list have given up hope on a solution for option
injection attacks via receiver addresses.
If there is a slight chance that receiver addresses get used that
are not syntax-verified, then you either should use S-nail and
check out *expandargv*[1] / *expandaddr*[2] documentation, or write
a shell/xy script to verify addressees before you call Heirloom/xy
mailx with the result.

  [1] http://sdaoden.users.sourceforge.net/code-nail.html#372
  [2] http://sdaoden.users.sourceforge.net/code-nail.html#371

--steffen

------------------------------------------------------------------------------
_______________________________________________
nail-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nail-devel

Reply via email to