GitLab

One of our list-admins send the following request:

x-list-name: some-list@listserver.net
x-unsubscribe:
mail@example.net

I don't know, why he added a line break? Users to these things. Admin was removed. List stoped working immediately, due to missing admin. Admin had to be restored by schleuder-cli.

Expected Behavior

The command should complain that the subscription-e-mail is missing. or The admin should get a warning, that he is about to unsubscribe himself and some confirmation like force is required.

Actual Behavior

Since the command does not get an e-mail-address on the same line, it assumes that the sender wants to unsubscribe himself.

Steps to Reproduce the Problem

1. Be Admin
2. Try to unsubscribe a list member
3. Add a line-break between x-unsubscribe: and the e-mail-address.

Specifications

• Version: 3.2.2-1~bpo9+1
• Installation method: deb
• Mail client version: any

Other information

I see, why the current behavior is useful. A person that want's to get off the list just sends x-unsubscribe: . Done.

But I'm filing this issue anyway because we had the problem with an actual admin. The list shutting down because of the unsubscribed admin caused some stress for the group using the list.

So, the command behaves as intended.
But this intended behavior bares some danger for clumsy admins.

Maybe you cannot prevent clumsy ppl from shooting themselves in the foot sometimes. It's not too hard to write a command and an e-mail-address on one line. I just wanted to let you know, that one of our list-admins managed to pull that of.