discourse/lib/email.rb
Dan Ungureanu 033d6b6437
FEATURE: Obfuscate emails on invite show page (#12433)
The email should not be ever displayed in clear text, except the case
when the user authenticates using another service.
2021-03-18 19:09:23 +02:00

81 lines
1.7 KiB
Ruby

# frozen_string_literal: true
require 'mail'
module Email
# cute little guy ain't he?
MESSAGE_ID_REGEX = /<(.*@.*)+>/
def self.is_valid?(email)
return false unless String === email
!!(EmailValidator.email_regex =~ email)
end
def self.downcase(email)
return email unless Email.is_valid?(email)
email.downcase
end
def self.obfuscate(email)
return email if !Email.is_valid?(email)
first, _, last = email.rpartition('@')
# Obfuscate each last part, except tld
last = last.split('.')
tld = last.pop
last.map! { |part| obfuscate_part(part) }
last << tld
"#{obfuscate_part(first)}@#{last.join('.')}"
end
def self.cleanup_alias(name)
name ? name.gsub(/[:<>,"]/, '') : name
end
def self.extract_parts(raw)
mail = Mail.new(raw)
text = nil
html = nil
if mail.multipart?
text = mail.text_part
html = mail.html_part
elsif mail.content_type.to_s["text/html"]
html = mail
else
text = mail
end
[text&.decoded, html&.decoded]
end
def self.site_title
SiteSetting.email_site_title.presence || SiteSetting.title
end
# https://tools.ietf.org/html/rfc850#section-2.1.7
def self.message_id_rfc_format(message_id)
return message_id if message_id =~ MESSAGE_ID_REGEX
"<#{message_id}>"
end
def self.message_id_clean(message_id)
return message_id if !(message_id =~ MESSAGE_ID_REGEX)
message_id.tr("<>", "")
end
private
def self.obfuscate_part(part)
if part.size < 3
"*" * part.size
elsif part.size < 5
part[0] + "*" * (part.size - 1)
else
part[0] + "*" * (part.size - 2) + part[-1]
end
end
end