notifications
notifications copied to clipboard
[BUG] No restriction for creating smtp email sender with existing sender name
Describe the bug Even thought the label of email sender name field says "Use a unique, descriptive name". There's actually no restriction in the backend to gurantee uniqueness. This will lead to secuirty risk as in the backend, the credentials are stored and retrieved by the sender name
To Reproduce Steps to reproduce the behavior:
- Go to '...'
- Click on '....'
- Scroll down to '....'
- See error
Expected behavior A clear and concise description of what you expected to happen.
Plugins Please list all plugins currently enabled.
Screenshots If applicable, add screenshots to help explain your problem.
Host/Environment (please complete the following information):
- OS: [e.g. iOS]
- Version [e.g. 22]
Additional context Can refer to Alerting implementation for a fix https://github.com/opensearch-project/alerting/blob/1.0/alerting/src/main/kotlin/org/opensearch/alerting/transport/TransportIndexEmailAccountAction.kt#L176