Subject: | Email address validation |
Date: | Thu, 17 May 2012 08:28:46 +0100 |
To: | bug-RT-Client-REST [...] rt.cpan.org |
From: | Tomas Doran <bobtfish [...] bobtfish.net> |
I'm not sure if this is really the client's job - however I've found that with RT4, if you add a CC or AdminCC of an invalid single character numeric email address (e.g. '4'), then you get the ticket CC'd to all RT users who have been 'granted rights'.
This is obviously a very serious bug in shared RT instances, and particularly easy to trigger (by scalar-ifying your list of CCs at the wrong moment!)..
I intend to work this back into the RT source, and fix it at the server side also - however I started on a patch for the client, so I'm opening this ticket for tracking…