Skip to content

Commit f07a819

Browse files
committed
Add assumptions to README
1 parent 3670fc5 commit f07a819

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

README.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -173,3 +173,8 @@ Use this bibtex citation.
173173
174174
- [ ] support character class regex grammar (so as to simplify the regular expressions)
175175
- [ ] better compatibility with regex grammar (will need a set of different tests to assert the compatibility between circuit and regex in languages) -->
176+
177+
## Assumptions
178+
Some email providers put not only the sender's email address but also their username to the From field.
179+
ALthough its concrete formats differ among email providers, our FromAddrRegex template assumes that the email address appears at the end of the From field.
180+
If this assumption does not hold, i.e., the username appears after the email address, an adversary can output an arbitrary email address from that template by including a dummy email address in the username.

0 commit comments

Comments
 (0)