Remove X-Message-SMTP-Method from news, too.

* message.el (message-ignored-news-headers): Always remove
X-Message-SMTP-Method to avoid information leakage if the user
mistakenly inserts the header into news messages.

diff --git a/lisp/ChangeLog b/lisp/ChangeLog
index cf50eb5..2eb6023 100644 (file)
--- a/lisp/ChangeLog
+++ b/lisp/ChangeLog
@@ -1,5 +1,9 @@
 2012-12-24  Lars Ingebrigtsen  <larsi@gnus.org>
 
+       * message.el (message-ignored-news-headers): Always remove
+       X-Message-SMTP-Method to avoid information leakage if the user
+       mistakenly inserts the header into news messages.
+
        * gnus-srvr.el (gnus-browse-delete-group): New command and keystroke.
 
        * gnus-sum.el (gnus-summary-hide-thread): If point were further to the

diff --git a/lisp/message.el b/lisp/message.el
index 9cd0a4d..c815485 100644 (file)
--- a/lisp/message.el
+++ b/lisp/message.el
@@ -268,7 +268,7 @@ This is a list of regexps and regexp matches."
   :type 'sexp)
 
 (defcustom message-ignored-news-headers
-  "^NNTP-Posting-Host:\\|^Xref:\\|^[BGF]cc:\\|^Resent-Fcc:\\|^X-Draft-From:\\|^X-Gnus-Agent-Meta-Information:"
+  "^NNTP-Posting-Host:\\|^Xref:\\|^[BGF]cc:\\|^Resent-Fcc:\\|^X-Draft-From:\\|^X-Gnus-Agent-Meta-Information:\\|^X-Message-SMTP-Method:"
   "*Regexp of headers to be removed unconditionally before posting."
   :group 'message-news
   :group 'message-headers