untaint mailman actions

diff --git a/mailman_suffixes b/mailman_suffixes
new file mode 100644 (file)
index 0000000..490f2a3
--- /dev/null
+++ b/mailman_suffixes
@@ -0,0 +1,7 @@
+bounces
+confirm
+join
+leave
+owner
+request
+admin

diff --git a/master b/master
index 163faea539939af8a67bc28031536faba1a0aa7e..1003ea9218247eaa3c316fe8a9791c9297c9f357 100644 (file)
--- a/master
+++ b/master
@@ -502,7 +502,7 @@ mailman_transport:
   driver = pipe
   command = MAILMAN_WRAP \
             '${if def:local_part_suffix \
-                  {${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \
+                  {${lookup{${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}}lsearch,ret=key{CONFDIR/mailman_suffixes}{$value}fail}} \
                   {post}}' \
             MAILMAN_UNTAINT_LOCALPART
   current_directory = MAILMAN_HOME