Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Feature] block-/allow-list for emails #13628

Closed
6543 opened this issue Nov 18, 2020 · 0 comments · Fixed by #14667
Closed

[Feature] block-/allow-list for emails #13628

6543 opened this issue Nov 18, 2020 · 0 comments · Fixed by #14667
Labels
type/feature Completely new functionality. Can only be merged if feature freeze is not active. type/proposal The new feature has not been accepted yet but needs to be discussed first.

Comments

@6543
Copy link
Member

6543 commented Nov 18, 2020 •
edited
Loading

It would be nice to reject email addresses from ... gmail, ru-tld domain, ...

I noticed spam accounts created with specific domains ....

ref:

gitea/models/user_mail.go

Line 46 in f915161

// TODO: add an email allow/block list

similar: #13610
@6543 6543 added type/feature Completely new functionality. Can only be merged if feature freeze is not active. type/proposal The new feature has not been accepted yet but needs to be discussed first. labels Nov 18, 2020
@6543 6543 mentioned this issue Feb 13, 2021
Merged
6543 pushed a commit that referenced this issue Feb 14, 2021
@gouttegd
Allow blocking some email domains from registering an account (#14667)
fc4a8c2 
Gitea allows to whitelist email domains so that only email addresses from certain domains are allowed to register an account, but does not currently allows to do the opposite: blacklisting email domains so that addresses from certain domains are *forbidden* to register an account.

The idea has been briefly mentioned in the discussion about issue #6350, but never implemented. This PR does that.

The rationale is that, in my experience of running a Gitea instance, *a single email domain* is responsible for *most* of the spam accounts, and for *all* of the spam accounts that manage to get past the email confirmation step. So on top of the other spam mitigation measures already available (email confirmation, CAPTCHA, etc.), having the option to block a particularly annoying domain would be helpful.

close #13628
@go-gitea go-gitea locked and limited conversation to collaborators May 13, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
type/feature Completely new functionality. Can only be merged if feature freeze is not active. type/proposal The new feature has not been accepted yet but needs to be discussed first.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Allow blocking some email domains from registering an account
1 participant
@6543