Andrey/uptime-kuma
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add security warning when STARTTLS is disabled

Browse Source
This commit is contained in:
Dharun Ashokkumar 2026-01-19 23:57:43 +05:30
parent 74ecfa77ca
commit f9c9930a3a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/notification-providers/smtp.js
View File

@ -1,5 +1,6 @@
const nodemailer = require("nodemailer"); const nodemailer = require("nodemailer");
const NotificationProvider = require("./notification-provider"); const NotificationProvider = require("./notification-provider");
const { log } = require("../../src/util");
class SMTP extends NotificationProvider { class SMTP extends NotificationProvider {
name = "smtp"; name = "smtp";
@ -25,6 +26,7 @@ class SMTP extends NotificationProvider {
} else if (notification.smtpIgnoreSTARTTLS) { } else if (notification.smtpIgnoreSTARTTLS) {
// Disable STARTTLS completely for servers that don't support it // Disable STARTTLS completely for servers that don't support it
// Connection will remain unencrypted // Connection will remain unencrypted
log.warn("notification", `SMTP notification using unencrypted connection (STARTTLS disabled) to ${notification.smtpHost}:${notification.smtpPort}`);
config.ignoreTLS = true; config.ignoreTLS = true;
} else { } else {
// Allow STARTTLS (default behavior for ports 25, 587) // Allow STARTTLS (default behavior for ports 25, 587)