Skip to content

Commit

Permalink
Add assumptions to README
Browse files Browse the repository at this point in the history
  • Loading branch information
SoraSuegami committed Oct 16, 2024
1 parent 3670fc5 commit f07a819
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -173,3 +173,8 @@ Use this bibtex citation.
- [ ] support character class regex grammar (so as to simplify the regular expressions)
- [ ] better compatibility with regex grammar (will need a set of different tests to assert the compatibility between circuit and regex in languages) -->

## Assumptions
Some email providers put not only the sender's email address but also their username to the From field.
ALthough its concrete formats differ among email providers, our FromAddrRegex template assumes that the email address appears at the end of the From field.
If this assumption does not hold, i.e., the username appears after the email address, an adversary can output an arbitrary email address from that template by including a dummy email address in the username.

0 comments on commit f07a819

Please sign in to comment.