Skip to content

Add SMTP header injection detection (#157)#234

Open
jthack wants to merge 1 commit into
mainfrom
issue-157-smtp-header-injection
Open

Add SMTP header injection detection (#157)#234
jthack wants to merge 1 commit into
mainfrom
issue-157-smtp-header-injection

Conversation

@jthack

@jthack jthack commented Oct 24, 2025

Copy link
Copy Markdown
Contributor

Summary

  • inspect request parameters for CRLF or header prefixes indicating SMTP header injection attempts
  • report medium severity findings listing the offending parameter names
  • register the passive rule and enable it in the Balanced preset

Testing

  • pnpm lint
  • pnpm typecheck
  • pnpm test -- --match 'SMTP header'

Closes #157

@jthack jthack requested a review from a team as a code owner October 24, 2025 13:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SMTP header injection

1 participant