Skip Menu |

This queue is for tickets about the RT-Client-REST CPAN distribution.

Report information
The Basics
Id: 77257
Status: rejected
Priority: 0/
Queue: RT-Client-REST

People
Owner: Nobody in particular
Requestors: bobtfish [...] bobtfish.net
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Email address validation
Date: Thu, 17 May 2012 08:28:46 +0100
To: bug-RT-Client-REST [...] rt.cpan.org
From: Tomas Doran <bobtfish [...] bobtfish.net>
I'm not sure if this is really the client's job - however I've found that with RT4, if you add a CC or AdminCC of an invalid single character numeric email address (e.g. '4'), then you get the ticket CC'd to all RT users who have been 'granted rights'. This is obviously a very serious bug in shared RT instances, and particularly easy to trigger (by scalar-ifying your list of CCs at the wrong moment!).. I intend to work this back into the RT source, and fix it at the server side also - however I started on a patch for the client, so I'm opening this ticket for tracking…
Forget this - it's a bug in the RT server - it special cases handling for /^\d$/ in RT::Ticket->Create, for no purpose (as it's never used). I've pushed a bug / patch upstream, and I'm going to reject this.