Skip to content

Bcc email-addresses should never be in bcc mime headers #23

@joust1

Description

@joust1

BCC should not be included in mime headers. Doing so causes all recipients to receive the full list of email addresses (even if their email client does not show them, they can be seen in the raw message).

BCCs are already added via RCPT TO

Further info: https://cknotes.com/bcc-email-addresses-should-never-be-in-bcc-mime-headers/

//Fix: remove/comment out lines 354 to 356 as below
// if (!empty($this->bcc)) {
// $this->setHeader('Bcc', $this->formatAddressList($this->bcc));
//}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions