Skip to content

Do not display confirmation token without actually sending an email

Simon Hanna requested to merge thelinuxguy/postorius:do-not-catch-smtp-exception into master

With the current exception handling the user receives the activation key in a notification, completely bypassing email validation!

In case emails can't be delivered there is something seriously wrong with the servers.
The admins can't be notified via email because of the exception in the first place.

Validating new emails without any actual checks is the worst thing a Mailman can ever do.

Merge request reports