django-unsubscribe

django-unsubscribe copied to clipboard

SECURITY RISK: Unsubscribe URL token can expose a site's SECRET_KEY

4

# TL;DR All developers using this package should immediately stop using it, and developers should not use this package until this issue is fixed and previous insecure versions removed from...

blag

Be aware that a lot of email client will honor only [mailto](http://stackoverflow.com/questions/4365850/list-unsubscribe-in-e-mail-header-how-to) type of link. Http link in fact may only confuse them.

ylv-io

Fix typo in unsubscribe.html template

3

KentShikama

While generating the token, one should be able to pass in the unsubscribed object identifier. Thanks @psjinx for the idea! :)

theskumar