{"push_id":2437649712,"size":5,"distinct_size":2,"ref":"refs/heads/261-do-not-try-to-double-decrypt-messages","head":"b59afc0e3873aa9f400f58735ac5b3d053dd56f9","before":"06ae392b1ff3e61535503c6c9cc432108eac04d8","commits":[{"sha":"752322d0bc174b354ad47466b28fbc0ed02eb54c","author":{"name":"georg","email":"fb5ce207bf1e8df0e4c252ccef8c0984186d2690@riseup.net"},"message":"Exchange filter: Check for Exchange header, instead of specific domains\n\nThis commit should fix mails sent by all Microsoft Exchange\ninstallations, not only the ones operated by Microsoft or hosted at\norganisations like Hotmail or Outlook.\n\nCloses #333","distinct":false,"url":"https://api.github.com/repos/schleuder/schleuder3/commits/752322d0bc174b354ad47466b28fbc0ed02eb54c"},{"sha":"875801caf93e776eccf4844b10178b330d7cd49c","author":{"name":"georg","email":"fb5ce207bf1e8df0e4c252ccef8c0984186d2690@riseup.net"},"message":"Merge branch '333-check-for-exchange-header' into 'master'\n\nHotmail filter: Check if the headers contain 'X-MS-Exchange', instead of a specific domain name\n\nCloses #333\n\nSee merge request schleuder/schleuder!171","distinct":false,"url":"https://api.github.com/repos/schleuder/schleuder3/commits/875801caf93e776eccf4844b10178b330d7cd49c"},{"sha":"00cbacddd8ad5a9195234c15ddc5d3a0c4b8e285","author":{"name":"georg","email":"fb5ce207bf1e8df0e4c252ccef8c0984186d2690@riseup.net"},"message":"CHANGELOG: Fix double whitespace","distinct":false,"url":"https://api.github.com/repos/schleuder/schleuder3/commits/00cbacddd8ad5a9195234c15ddc5d3a0c4b8e285"},{"sha":"ff264ef8e8f0e6aa73d1297e19ae6f95a3f5f40f","author":{"name":"ng","email":"207e62d88f72d0d73811d711fb105fcb3f6d04c6@immerda.ch"},"message":"Fix #261 - do not fail on encrypted content in plaintext\n\nThe `Mail::Gpg.signed?` method raises an error if it didn't\ndetect any signature, but detects the PGP boundaries in the\nbody.\n\nThis becomes a problem if folks include any kind of PGP\nboundaries for an encrypted message in their body. This can\ne.g. happen if you try to describe how PGP works, include\nanother PGP signed message in your mail (e.g. don't want to\nhave even schleuder access to your mail content), you\nhave a MUA with problematic quoting behavior or you simply\nforward an email with PGP boundaries, which you e.g. might\nhave received through Schleuder's admin notification.\n\nThis patch addresses these cases by a) checking if the\ndecrypted mail had any signatures on it and so we already\nverified signatures and b) using the detection methods\ndirectly, so we don't run into raising the encryption of\nbetter using `.decrypt`.\n\n2 tests are included to demonstrate the problematic behavior\nand which should cover the 2 main cases described in the bug\nreport.\n\nThese changes have the side effect, that we won't anymore verify\nany signatures within an email that already had a signature as\npart of the encrypted blob. This can be seen, e.g. that we need\nto change the test for the `x-sign-this` keyword, as a side-effect\nof using schleuder to decrypt the mail sent by schleuder, we had\nalso the signature of the signed blob stripped away. Actually,\nwe were testing for the wrong thing in this test anyway.","distinct":true,"url":"https://api.github.com/repos/schleuder/schleuder3/commits/ff264ef8e8f0e6aa73d1297e19ae6f95a3f5f40f"},{"sha":"b59afc0e3873aa9f400f58735ac5b3d053dd56f9","author":{"name":"ng","email":"207e62d88f72d0d73811d711fb105fcb3f6d04c6@immerda.ch"},"message":"test the whole corpus of thunderbird emails\n\nQuite a back ago we added corpus of emails from thunderbird, to\nensure we are able to parse them. Though we never added the\ncorpus to the tests.","distinct":true,"url":"https://api.github.com/repos/schleuder/schleuder3/commits/b59afc0e3873aa9f400f58735ac5b3d053dd56f9"}]}
{"actor":{"display_login":"schleuderrr"}}