feat(SecurityService): enhance phishing detection by verifying sender domains and institutional TLDs

2026-05-25 18:16:07 +02:00
parent edfc399061
commit 6ab4d77ca9
1 changed files with 1 additions and 1 deletions
@@ -765,7 +765,7 @@ export class SecurityService {
      const uniqueUrls = [...new Set(urlMatches.map(u => u.replace(/[.,;)]+$/, '')))].slice(0, 20);

      // Extract sender domain for context
-      const senderDomain = fromEmail.includes('@') ? fromEmail.split('@')[1].toLowerCase() : fromEmail.toLowerCase();
+      const senderDomain = (fromEmail.split('@')[1] ?? fromEmail).toLowerCase();

      // Check whether this domain is verified by the project. A verified
      // domain means the sender proved DNS/DKIM control — strong evidence of