diff --git a/milters/comment_email_milter.py b/milters/comment_email_milter.py index 2e33385..ccd4b87 100644 --- a/milters/comment_email_milter.py +++ b/milters/comment_email_milter.py @@ -130,7 +130,7 @@ class PagureMilter(Milter.Base): # Ensure the user replied to his/her own notification, not that # they are trying to forge their ID into someone else's salt = pagure.APP.config.get('SALT_EMAIL') - m = hashlib.sha512('%s%s%s' % (msg_id, salt, msg['From'])) + m = hashlib.sha512('%s%s%s' % (msg_id, salt, clean_item(msg['From']))) tohash= msg['to'].split('@')[0].split('+')[-1] if m.hexdigest() != tohash: self.log('hash: %s' % m.hexdigest())