Publicly exposed smtp4dev interface allowing access to intercepted emails and test configurations.

[Remonsazzad]

smtp4dev-interface-exposed

vulerabel urls :

Removed

[rnwood]

Thanks for the report @Remonsazzad . I have removed the URLs.

I am open to thoughts about how to modify the default config to make this harder for people to do unknowingly.

Perhaps make the web interface listen only on localhost including the docker version forwarded port (is that possible?)