Ralph Slooten
31ec6681a7
Feature: Experimental Unix socket support for HTTPD & SMTPD ( #373 )
2024-10-24 23:12:34 +13:00
Ralph Slooten
405babda7b
Testing: Add tenantIDs to tests
2024-10-18 17:55:46 +13:00
Ralph Slooten
7f4cd90c03
Add undocumented "demonstration mode"
2024-09-08 00:23:15 +12:00
Ralph Slooten
d48b5e8674
Feature: Add option to control message retention by age ( #338 )
2024-08-06 17:23:28 +12:00
Ralph Slooten
a078c318e8
Fix(Security): Prevent bypass of Contend Security Policy using stored XSS, and sanitize preview HTML data (DOMPurify)
...
This closes a security hole whereby a bad actor with SMTP access can bypass the CSP headers with a series of specially crafted HTML messages. A special thanks to @bmodotdev for responsibly disclosing the vulnerability and proving information and an initial fix.
2024-07-26 22:02:14 +12:00
Ralph Slooten
6947c2a621
Feature: Add optional relay recipient blocklist ( #333 )
2024-07-14 15:04:36 +12:00
Ralph Slooten
0dca8df29c
Feature: Add option to disable auto-tagging for plus-addresses & X-Tags ( #323 )
2024-06-28 22:35:07 +12:00
Ralph Slooten
a155b395db
Feature: Add optional label to identify Mailpit instance ( #316 )
2024-06-21 16:54:33 +12:00
Ralph Slooten
dddc52a668
Feature: Set tagging filters via a config file
2024-04-26 14:52:10 +12:00
Ralph Slooten
65fb188586
Do not export autoTag struct
2024-04-25 23:18:46 +12:00
Ralph Slooten
d3b048e933
Chore: Clearer error messages for read/write permission failures ( #281 )
2024-04-21 10:16:59 +12:00
Ralph Slooten
cbcf0be1a2
Feature: Option to auto relay for matching recipient expression only ( #274 )
2024-04-20 23:42:36 +12:00
Ralph Slooten
5ad76cb3a7
Fix typo
2024-04-18 19:32:09 +12:00
Ralph Slooten
7085690e3d
Only compile SMTPRelayConfig.AllowedRecipients if set
2024-04-16 22:15:09 +12:00
Ralph Slooten
31e4f84f9a
Chore: Remove deprecated --disable-html-check option
2024-04-13 00:25:48 +12:00
Ralph Slooten
48c73ae97b
Chore: Switch database flag/env to --database / MP_DATABASE
...
The original `--db-file` / `MP_DATA_FILE`, although deprecated, won't be removed any time soon to ensure backwards compatibility with existing integrations
2024-04-12 14:47:47 +12:00
Ralph Slooten
6a410a28b6
Feature: Add optional tenant ID to isolate data in shared databases ( #254 )
2024-04-09 21:30:56 +12:00
Ralph Slooten
73446ed6f7
Fix: Enforce SMTP STARTTLS by default if authentication is set
2024-03-17 14:59:14 +13:00
Ralph Slooten
528c35eec6
Feature: Add SMTP TLS option ( #265 )
2024-03-17 14:57:41 +13:00
Ralph Slooten
a324d817b3
Feature: Allow setting SMTP relay configuration values via environment variables ( #262 )
2024-03-12 17:10:13 +13:00
Ralph Slooten
23b1261cf9
Chore: Tag names now allow . and must be a minimum of 1 character
2024-03-02 22:51:30 +13:00
Ralph Slooten
f548bbb874
Feature: Optional POP3 server ( #249 )
...
Originally requested in #72
2024-02-24 23:10:48 +13:00
Ralph Slooten
26a2095674
Chore: Security improvements (gosec)
2024-02-17 12:38:30 +13:00
Ralph Slooten
dda0b0c8a6
Feature: Add TLSRequired option for smtpd ( #241 )
2024-01-27 23:00:07 +13:00
Ralph Slooten
9cda71f21a
Feature: Add optional SpamAssassin integration to display scores ( #233 )
2024-01-20 12:07:49 +13:00
Ralph Slooten
cdab59b295
Feature: Add option to only allow SMTP recipients matching a regular expression (disable open-relay behaviour #219 )
2024-01-03 12:06:36 +13:00
Ralph Slooten
085e76f33e
Feature: Add configuration option to set maximum SMTP recipients ( #205 )
2023-12-14 16:26:12 +13:00
Imanuel Ulbricht
4a12f2cd62
Feature: Add @ as valid character for webroot ( #215 )
...
Added `@` as valid character for `--webroot`. This allows the usage in Coder without a subdomain.
2023-12-07 16:26:14 +13:00
Ralph Slooten
2e9d5008c2
Feature: Allow port binding using hostname
...
See #213
2023-12-01 14:50:03 +13:00
Ralph Slooten
4c5b024eca
Feature: Option to allow untrusted HTTPS certificates for screenshots & link checking ( #204 )
2023-11-11 23:10:43 +13:00
Ralph Slooten
140bdd6c20
Feature: Set optional webhook for received messages ( #195 )
2023-10-20 23:16:56 +13:00
Ralph Slooten
0ab4210640
Feature: Set auth credentials directly from environment variables
...
Credentials for the UI and SMTP can now be exported via the `MP_UI_AUTH` and `MP_SMTP_AUTH` environment variables. See #173
2023-09-29 16:40:23 +13:00
Ralph Slooten
b6d5a8c182
Chore: Update internal import paths
2023-09-25 19:29:30 +13:00
Ralph Slooten
95e346f8af
Improved search parser
2023-09-22 06:55:51 +12:00
Ralph Slooten
7875160aa7
Feature: Workaround for non-RFC-compliant message headers containing <CR><CR><LF>
...
Due to a bug in some common sendmail implementations and PHP >=8.0, message headers sometimes contain `\r\r\n` which is not RFC compliant.
Mailpit will now fix these non-compliant headers. This can be disabled via `--smtp-strict-rfc-headers`
See #87 / #153
2023-08-15 17:13:25 +12:00
Ralph Slooten
1922651d41
Feature: HTML check to test & score mail client compatibility with HTML emails
2023-07-30 17:04:06 +12:00
Ralph Slooten
7d2716ee17
UI: Add flag to block all access to remote CSS and fonts (CSP)
...
This is now set to allow by default.
@see #140
2023-07-29 22:25:37 +12:00
Ralph Slooten
d4268b8ae1
Feature: Set tags via X-Tags message header
...
@see #119
2023-06-02 14:47:36 +12:00
Ralph Slooten
52120abefd
Feature: Add SMTP LOGIN authentication method for message relay
...
See #118
2023-05-30 15:54:26 +12:00
Matthias Gliwka
fdc1b05545
Feature: Add allowlist to filter recipients before relaying messages ( #109 )
...
* Bugfix: Don't panic on mails without from line
* Feature: Add allowlist to filter recipients before relaying messages
2023-05-05 15:28:00 +12:00
Ralph Slooten
5f919cc9dd
Feature: Option to ignore duplicate Message-IDs
...
This option (default off) silently ignores any new messages with duplicate Message-IDs. This update includes a new database structure and automatic rebuild of existing data.
2023-05-04 21:48:09 +12:00
Ralph Slooten
04462f76c6
API: Message relay / release
...
This enables a SMTP server to be configured, and messages to be manually "released" via the relay server. Aditionally, messages can be auto-relayed via the SMTP server do Mailpit acts as a form of caching proxy.
@see #29
2023-04-21 12:10:13 +12:00
Ralph Slooten
2752a09ca7
Move logging variable level to logger module
2023-04-21 11:59:26 +12:00
Thomas Jepp
efc9c10f83
Feature: Update listen regex to allow IPv6 addresses ( #85 )
2023-04-12 16:03:36 +12:00
Ralph Slooten
169c476c56
Feature: Rename SSL to TLS, add deprecation warnings to flags & ENV variables referring to SSL
2023-03-31 18:44:06 +13:00
Ralph Slooten
57b0e1666f
Feature: Options to support auth without STARTTLS, and accept any login
...
@see #56
2023-03-31 18:44:06 +13:00
Ralph Slooten
a9ce35b741
Feature: Option to use message dates as received dates (new messages only)
2023-03-31 18:44:05 +13:00
Ralph Slooten
b905ba4ec5
Feature: Expand custom webroot path to include a-z A-Z 0-9 _ . - and /
...
@see #64
2023-03-10 14:48:28 +13:00
Ralph Slooten
b18bcebd51
Fix error casing
2022-12-15 22:09:03 +13:00
Ralph Slooten
5f9efebeb3
Bugfix: Append trailing slash to custom webroot for UI & API
...
Fixes #25
2022-12-08 09:54:03 +13:00
