Share feedback, ideas and get community help

Home
Members
Estevão Fernandes
E
Estevão Fernandes
Offline, last seen 3 months ago
Joined September 21, 2024
I have a self-hosted typebot, and I would like to prevent users from sending emails using the administrator's email.

Describe the bug
By assuming the SMTP configuration of the installation variable for all workspaces and users, this creates a vulnerability, where a user can send an email as the email of the administrator who installed the application, which is not always desired.

To Reproduce
Steps to reproduce the behavior:

Use email block
The From field will be filled with the administrator's email, even for those who have not registered an SMTP credential.
Expected behavior
Each user must register their SMTP credentials, without listing the administrator's as default.

Is there any alternative to this behavior?
2 comments
W
B