fix: fixed drupal spoofing check

forwardemail · Dec 11, 2024 · 9dc9948 · 9dc9948
1 parent a87ee47
commit 9dc9948
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/helpers/is-arbitrary.js b/helpers/is-arbitrary.js
@@ -233,7 +233,7 @@ function isArbitrary(session, headers, bodyStr) {
         !['softfail', 'fail'].includes(session.spfFromHeader.status.result) &&
         subject &&
         (!headers.hasHeader('x-mailer') ||
-          headers.getFirst('x-mailer').toLowerCase().includes('drupal')) &&
+          !headers.getFirst('x-mailer').toLowerCase().includes('drupal')) &&
         REGEX_SYSADMIN_SUBJECT.test(subject)
       )
     ) {