Share feedback, ideas and get community help

Updated 3 months ago

Typebot - Prevent sending emails with admin email accoun

I have a self-hosted typebot, and I would like to prevent users from sending emails using the administrator's email.

Describe the bug
By assuming the SMTP configuration of the installation variable for all workspaces and users, this creates a vulnerability, where a user can send an email as the email of the administrator who installed the application, which is not always desired.

To Reproduce
Steps to reproduce the behavior:

Use email block
The From field will be filled with the administrator's email, even for those who have not registered an SMTP credential.
Expected behavior
Each user must register their SMTP credentials, without listing the administrator's as default.

Is there any alternative to this behavior?
Attachment
368784948-fd87dbe1-5f36-4c0a-aad0-cdae96e4e13a.png
W
B
2 comments
In my opion, thats a feature!
Yes, I saw that you've created an issue, it will be worked on 🙂
Add a reply
Sign up and join the conversation on Discord