Email is revealed in "Package published" notification

Aberta
#275 1 comentário 0 reações 0 responsáveis Ver no GitHub

Ninguém assumiu esta issue ainda.

Avaliação

Dificuldade
2/5
Tempo estimado
1-3 horas
Facilidade para iniciantes
35/100
Tipo de issue
Bug
Clareza
Razoavelmente clara
Status de atividade
Estagnada
Stack de tecnologia
powershell
Domínio
backend, security

Direção de pesquisa

Start by locating the code that sends the “Package published” notification and inspect how recipient addresses are added to the To field. The issue asks that co-owner email addresses remain private, suggesting individual messages or BCC; it also raises a question about notifications for packages published by another account. Done means recipients no longer see one another’s email addresses and the notification behavior is clarified.

Escrita pelo modelo de indexação a partir do texto da issue.

Descrição

Prerequisites
  • Write a descriptive title.
  • Make sure you are able to repro it on the latest version
  • Search the existing issues.
Steps to reproduce
  • Be owner of a module/package
  • (Maybe, see actual behavior comment) Enable notification setting shown below
  • Co-owner publishes a new version.

image

Expected behavior

Email remains private. The note says "Also, we never reveal your email address to other users.", not excluding co-owners. Use individual notification emails or BCC

Actual behavior

Email with subject "[PowerShell Gallery] Package published - <modulename> <version>" adds all owners in To-field exposing the email.

Bonus bug? Package was published with another account, yet I got an email. Is this expected? Option only to exclude self published packages?

Error details

No response

Environment data
N/A
Version

N/A

Visuals

No response

Linguagem predominante
PowerShell
Estrelas
289
Forks
83
Merge médio
1min
PRs com merge (30d)
1

Preparar o ambiente

Primeiros passos

  1. Leia a issue inteira e depois o guia de contribuição do projeto.
  2. Comente na issue dizendo que vai assumir — evita que duas pessoas façam o mesmo trabalho.
  3. Faça um fork do repositório e trabalhe em uma branch.
  4. Abra um pull request que referencie o número da issue.

Mais de PowerShell/PowerShellGallery

Todas as issues de PowerShell/PowerShellGallery

Issues semelhantes

Mais issues de Backend & API Design

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.