From b014443090976ef6a6cb3a89b85c72ed55d4fbdc Mon Sep 17 00:00:00 2001 From: Severin Date: Tue, 10 Feb 2026 08:20:51 +0100 Subject: [PATCH] Secure sendmail to disable user commands from mail address See https://www.postfix.org/sendmail.1.html under Security --- config/mail.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/mail.php b/config/mail.php index 423f61736..8848c6a33 100644 --- a/config/mail.php +++ b/config/mail.php @@ -72,7 +72,7 @@ return [ 'sendmail' => [ 'transport' => 'sendmail', - 'path' => env('MAIL_SENDMAIL_PATH', '/usr/sbin/sendmail -bs -i'), + 'path' => env('MAIL_SENDMAIL_PATH', '/usr/sbin/sendmail -bs -i --'), ], 'log' => [