Tickets :: Comment on [#11376] Itip auto-accept requests

* Your Email Address
* Spam protection	Enter the letters below: __..__ . . ..___ (__ [__)\|\ \| \|[__ .__)[__)\| \\|\__\|\|
Comment	> I actually wanted to implement this in the ActiveSync code that > handles invitations as well. I didn't do this for the same reason > (and the fact that it wouldn't be consistent with what the user > currently expects from using Horde). Exchange does do this, but, if > I understand correctly, only for responses from "local" exchange > users. > > I would really like this feature though since it would complete our > ActiveSync invitation support (making us the only FOSS groupware that > supports this completely without relying on MAPI libraries). > > What about making this a user controlled pref disabled by default and > at least performing a check against the From header and the > response's email field? IMO, it would be a low risk since the > malicious user would need all of the event details, including the > UID, right?
Attachment
Watch this ticket