Closed Bug 173102 Opened 23 years ago Closed 21 years ago

[Mailing lists] Can subscribe others without their noficiation

Categories

(mozilla.org :: Miscellaneous, task)

Product:
mozilla.org
Component:
Miscellaneous
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: BenB, Assigned: endico)

Details

Reproduction: 1. Compose mail from <yourname@example.com> to <mozilla-test-request@mozilla.org> with subject "subscribe" and body "subscribe somebodyelse@example.com". 2. Fetch mail for both yourname and somebody else Actual result: - Subscription succeeds - Only yourname is notified about the subscription Expected result: - Subscription is helt until confimed by somebodyelse. - somebody else is at least being notified about the subscription. Additional comments: - This makes malicious attacks like we experienced half a year ago much easier. Unresponsively easy.
-> endico, cc dmose.
Assignee: mitchell → endico
changing QA contact
QA Contact: mitchell → dmose
This was fixed when we started using MailMan instead of slist.
Status: NEW → RESOLVED
Closed: 21 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.