[Tickets #13041] Posibillity to diabled the Received from ... (Horde Framework) with HTTP header line injection to the e-Mail header lines.

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/13041
------------------------------------------------------------------------------
  Ticket             | 13041
  Created By         | klaus at tachtler.net
  Summary            | Posibillity to diabled the Received from ... (Horde
                     | Framework) with HTTP header line injection to the
                     | e-Mail header lines.
  Queue              | Horde Framework Packages
  Version            | Git master
  Type               | Enhancement
  State              | New
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


klaus at tachtler.net (2014-03-12 14:00) wrote:

Hi,

is there a possibility, or could this be realized, to diabled the  
Received from ... (Horde Framework) with HTTP ... header line  
injection to the e-Mail header lines.

This was done in: .../Horde/Mime/Headers.php - Line 278

...
$this->addHeader('Received', $received);
...

This could be good for security reason, because sometime I use a  
browser at a place, and I don't want to get lines like the following  
in my e-Mail-Header:

Received: from place.domain.tld (place.domain.tld [xxx.xxx.xxx.xxx]) by
  my.domain.tld (Horde Framework) with HTTP; Tue, 11 Mar 2014 10:31:16
  +0100

Thank you!