Out of office: jcoffey-dev is traveling from November 1 to November 6. Responses to issues may be slow or delayed during this time, but I will be checking in.
For every link to a known URL shortener in a message, the spam filter
made up to three requests to follow it, with no limit per message, so
one message full of shortener links made the server issue hundreds of
sequential requests with a 5 second timeout each. The lookups skipped
certificate checks and followed plain http links as given.
A message now causes at most ten redirector lookups. Lookups are made
over https with the certificate verified, a plain http link is looked
up at its https address, and requests reach only public addresses.
Test: a message with fifteen shortener links resolved all fifteen on
main (30 URLs analyzed); now ten are resolved (25), and a plain http
shortener link is still followed.
jcoffey-dev
45c83f2b1e