mixandClaude Opus 5.5 00feb7c1c7 design: help, an allow entry by sender address trusts a claimed address ...

From the security review of 2026-10-12: the allow list matches the
envelope sender, which nobody authenticates. Help's Filter lists topic
says so and points to client addresses and networks.

check.py: 32 screens, 0 violations.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-12 07:51:49 +03:00

..

src

design: help, an allow entry by sender address trusts a claimed address

2026-10-12 07:51:49 +03:00

account.html

design: a domain's report address is one of three choices; row actions are POSTs

2026-10-10 12:38:35 +03:00

audit.js

release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix

2026-09-22 15:24:53 +03:00

backup.html

design: the panel's backup needs the private key readable, and says so

2026-10-11 20:43:10 +03:00

build.py

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

check.py

design: in-log, Why is a sheet over the page; no Deny on a Postfix reject

2026-10-12 00:12:04 +03:00

components.html

design: the sheet on the components page is a table; no empty Subject

2026-10-12 00:13:14 +03:00

dmarc-domain.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

dmarc-report.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

dmarc.html

design: the DMARC hub says reports are kept 500 a domain

2026-10-11 17:40:30 +03:00

health.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

help.html

design: help, an allow entry by sender address trusts a claimed address

2026-10-12 07:51:49 +03:00

in-domain-delete.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

in-domain.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

in-domains.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

in-filter-lists.html

design: in-filter-lists, kind column, matches, the note on a sheet

2026-10-12 00:54:04 +03:00

in-log.html

design: the sheet on the components page is a table; no empty Subject

2026-10-12 00:13:14 +03:00

in-quarantine-message.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

in-quarantine.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

in-queue.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

login-no-admin.html

design: sign-in before any administrator exists is a drawn screen

2026-10-09 23:33:25 +03:00

login.html

release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix

2026-09-22 15:24:53 +03:00

out-app-created.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

out-app.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

out-domain-delete.html

design: links into Domain settings open the page at its top

2026-10-10 23:57:35 +03:00

out-domain-settings.html

design: a domain's report address is one of three choices; row actions are POSTs

2026-10-10 12:38:35 +03:00

out-domain.html

design: links into Domain settings open the page at its top

2026-10-10 23:57:35 +03:00

out-domains.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

out-log.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

out-message.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

out-queue.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

outlines.json

design: Inbound log and Filter lists as built; inbound retention; Help

2026-10-11 23:18:57 +03:00

overview.html

design: the health cards of Overview open Health at its top

2026-10-11 14:12:53 +03:00

perf-edge.svg

release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix

2026-09-22 15:24:53 +03:00

preflight.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

settings.html

design: Inbound log and Filter lists as built; inbound retention; Help

2026-10-11 23:18:57 +03:00

setup.html

release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix

2026-09-22 15:24:53 +03:00

system-log.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

theme.css

design: in-log, Why is a sheet over the page; no Deny on a Postfix reject

2026-10-12 00:12:04 +03:00

user-delete.html

design: Sign out is a POST form in the mockups, tinted like the links

2026-10-09 18:10:45 +03:00

user.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00

users.html

design: Help covers every section; boxes link to their topic

2026-10-10 11:58:35 +03:00