Prevent service desk email replies of mentioning users
Creating notes on service desk issues via emails allows users/entities to be mentioned if the mention markdown is present on the email body.
Steps to reproduce
- Create a service desk issue via email
- Create a note in the issue using GitLab
- Send an email on reply to that note mentioning any user present on the service desk project
Results
The note will be created and mentioned user will receive an email
Expected results
Note should still be created but no user should be mentioned
Possible solutions
Enclose user mentions into code span `` of the email body before note gets created. This would allow user mentions to be present in the email but not be processed.
Something similar is already being made for redacting quick actions on ::EE::Gitlab::Email::Handler::ReplyProcessing
.
Edited by Felipe Artur