0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-14 13:58:53 +08:00
discourse/app/mailers
Isaac Janzen 4c0367f774
DEV: Strip unsubscribe links when sending digest previews to arbitrary addresses (#38298)
# Problem

When an admin sends a digest preview to an arbitrary email address, the
email contained functional unsubscribe links belonging to the target
user, allowing the recipient to unsubscribe that user without their
consent.

# Solution

Pass `skip_unsubscribe_links: true` when generating preview digests,
which skips `UnsubscribeKey` creation and suppresses unsubscribe content
from both email headers and body templates at the source.
2026-03-05 13:58:51 -06:00
..
admin_confirmation_mailer.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
download_backup_mailer.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
group_smtp_mailer.rb UX: improve sender name in emails (#36974) 2026-01-06 15:41:01 +04:00
invite_mailer.rb UX: add modifier to customize invite template (#35458) 2025-10-27 11:58:58 -04:00
rejection_mailer.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
subscription_mailer.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
test_mailer.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
user_notifications.rb DEV: Strip unsubscribe links when sending digest previews to arbitrary addresses (#38298) 2026-03-05 13:58:51 -06:00
version_mailer.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00