filip/Stalwart
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Masked emails: Return UnknownRecipient only for disabled or expired masked emails

Browse Source
This commit is contained in:
Maurus Decimus
2026-07-05 09:56:35 +02:00
parent 00ca557340
commit 4b8ea03e7e
2 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGELOG.md
View File

@@ -13,10 +13,13 @@ If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If
## Fixed ## Fixed
- DANE: Treat DNSSEC `bogus` as a temporary failures to prevent downgrade attacks. - DANE: Treat DNSSEC `bogus` as a temporary failures to prevent downgrade attacks.
- OIDC: `ECDSA` private key support for `SEC1` format. - OIDC:
- `ECDSA` private key support for `SEC1` format.
- Allow ports in `redirect_uri` for loopback addresses.
- PostgreSQL: Include error chain in error messages. - PostgreSQL: Include error chain in error messages.
- Prometheus: event counters are exported with incorrect metric names. - Prometheus: event counters are exported with incorrect metric names.
- Registry: Changing the type of an existing account from `user` to `group` panics. - Registry: Changing the type of an existing account from `user` to `group` panics.
- Masked emails: Return `UnknownRecipient` only for disabled or expired masked emails.
## [0.16.11] - 2026-06-25 ## [0.16.11] - 2026-06-25

8
crates/common/src/network/mta.rs
View File

@@ -76,14 +76,14 @@ impl Server {
if self.is_enterprise_edition() if self.is_enterprise_edition()
&& let Cow::Borrowed(addr) = &local_part && let Cow::Borrowed(addr) = &local_part
&& let Some(masked_id) = crate::enterprise::masked::MaskedAddress::parse(addr) && let Some(masked_id) = crate::enterprise::masked::MaskedAddress::parse(addr)
{ && let Some(masked_entry) = self
// Masked email resolution
return if let Some(masked_entry) = self
.registry() .registry()
.object::<MaskedEmail>(Id::new(masked_id)) .object::<MaskedEmail>(Id::new(masked_id))
.await .await
.caused_by(trc::location!())? .caused_by(trc::location!())?
&& masked_entry.enabled {
// Masked email resolution
return if masked_entry.enabled
&& masked_entry && masked_entry
.expires_at .expires_at
.is_none_or(|at| at.timestamp() > now() as i64) .is_none_or(|at| at.timestamp() > now() as i64)