discourse/db/migrate/20221125001635_add_bcc_addresses_to_email_log.rb
Alan Guo Xiang Tan ab3a032b4b
SECURITY: BCC active user emails from group SMTP (#19725)
When sending emails out via group SMTP, if we
are sending them to non-staged users we want
to mask those emails with BCC, just so we don't
expose them to anyone we shouldn't. Staged users
are ones that have likely only interacted with
support via email, and will likely include other
people who were CC'd on the original email to the
group.

Co-authored-by: Martin Brennan <martin@discourse.org>
2023-01-05 06:07:50 +08:00

8 lines
179 B
Ruby

# frozen_string_literal: true
class AddBccAddressesToEmailLog < ActiveRecord::Migration[7.0]
def change
add_column :email_logs, :bcc_addresses, :text, null: true
end
end