Compare commits

..

2 Commits

Author SHA1 Message Date
Alexis Mousset
58026d8318 Prepare 0.8.4 release 2020-11-11 17:46:42 +01:00
Alexis Mousset
d86900e37e fix(transport-sendmail): Stop argument parsing before destination addresses 2020-11-11 17:43:05 +01:00
4 changed files with 12 additions and 2 deletions

View File

@@ -1,3 +1,12 @@
<a name="v0.8.4"></a>
### v0.8.4 (2020-11-11)
#### Bug Fixes
* **transport**
* **SECURITY**: Prevent argument injection in sendmail transport
<a name="v0.8.2"></a> <a name="v0.8.2"></a>
### v0.8.2 (2018-05-03) ### v0.8.2 (2018-05-03)

View File

@@ -1,7 +1,7 @@
[package] [package]
name = "lettre" name = "lettre"
version = "0.8.2" # remember to update html_root_url version = "0.8.4" # remember to update html_root_url
description = "Email client" description = "Email client"
readme = "README.md" readme = "README.md"
homepage = "http://lettre.at" homepage = "http://lettre.at"

View File

@@ -4,7 +4,7 @@
//! emails have to implement `SendableEmail`. //! emails have to implement `SendableEmail`.
//! //!
#![doc(html_root_url = "https://docs.rs/lettre/0.8.2")] #![doc(html_root_url = "https://docs.rs/lettre/0.8.4")]
#![deny(missing_docs, missing_debug_implementations, missing_copy_implementations, trivial_casts, #![deny(missing_docs, missing_debug_implementations, missing_copy_implementations, trivial_casts,
trivial_numeric_casts, unsafe_code, unstable_features, unused_import_braces, trivial_numeric_casts, unsafe_code, unstable_features, unused_import_braces,
unused_qualifications)] unused_qualifications)]

View File

@@ -46,6 +46,7 @@ impl<'a, T: Read + 'a> EmailTransport<'a, T, SendmailResult> for SendmailTranspo
Some(address) => address.to_string(), Some(address) => address.to_string(),
None => "\"\"".to_string(), None => "\"\"".to_string(),
}, },
"--",
&to_addresses.join(" "), &to_addresses.join(" "),
]) ])
.stdin(Stdio::piped()) .stdin(Stdio::piped())