Skip to content

fix(backlinks): block restricted email senders - #31

Merged
ralyodio merged 2 commits into
masterfrom
codex/email-sender-blocklist
Nov 1, 2026
Merged

ralyodio merged 2 commits into
masterfrom
codex/email-sender-blocklist

Conversation

@sh1pt-actions-fleet

Copy link
Copy Markdown
Contributor

Scope

Add a configurable sender blocklist to the Backlinks follow-up sender before it calls SMTP or Mailgun. Pending campaign records are preserved; this does not redirect traffic to another provider.

Verification

  • node --test mcp_modules/backlinks/test/sending.test.js — 1 test

The guard only takes effect after EMAIL_QUEUE_BLOCKED_SENDERS is configured in the deployed service. No production configuration was changed.

@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

16 finding(s)

HIGH/CRITICAL: 13 | MEDIUM: 3

Severity Rule Location
HIGH sh-plaintext-download bin/deploy.sh:49
HIGH secret-generic-api-key mcp_modules/convert2doc/examples/usage-example.js:11
HIGH secret-generic-api-key mcp_modules/fake_json/docs/api.md:151
HIGH secret-generic-api-key mcp_modules/fake_json/README.md:82
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:10
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:22
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:38
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:166
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:187
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:215
HIGH secret-generic-api-key mcp_modules/seo-ranking/README.md:415
HIGH secret-generic-credential mcp_modules/webhook_verify/examples/basic-usage.js:10
HIGH sensitive-file-committed sample.env:1
MEDIUM sh-remote-script-execution bin/provision.sh:43
MEDIUM sh-remote-script-execution mcp_modules/wcag/bin/install.sh:111
MEDIUM sh-remote-script-execution mcp_modules/wcag/bin/install.sh:120

Snippets are redacted; ThreatCrush never prints matched credential material.

@sh1pt-actions-fleet
sh1pt-actions-fleet Bot marked this pull request as ready for review October 31, 2026 02:51
@ralyodio
ralyodio merged commit ecaff67 into master Nov 1, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants