Bug 1627960 Comment 0 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Original comment by
on
(Hidden by Administrator)
Revision 1 by
on 
User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

I set up a default Bcc: address in Account Settings > [Account} > Copies & Folders > Bcc these email addresses:

I click on "Accept invitation" in the invitation email.


Actual results:

The invitation acceptance message is not only sent to the person sending the invitation, but also to the Bcc: address.


Expected results:

The acceptance message should only sent to the person inviting my, but not to the Bcc: address. This can be a possible security leak. On a technical side, it is not even logical to send it to anybody else than the host and the invitees.

See also: bug 1577082, bug 1562896

Back to Bug 1627960 Comment 0