vynte-infra/plunk
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(SecurityService): enhance phishing detection by verifying sender domains and institutional TLDs

Browse Source
This commit is contained in:
Dries Augustyns
2026-05-25 18:16:07 +02:00
parent edfc399061
commit 6ab4d77ca9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/api/src/services/SecurityService.ts
+1 -1
View File
@@ -765,7 +765,7 @@ export class SecurityService {
const uniqueUrls = [...new Set(urlMatches.map(u => u.replace(/[.,;)]+$/, '')))].slice(0, 20); const uniqueUrls = [...new Set(urlMatches.map(u => u.replace(/[.,;)]+$/, '')))].slice(0, 20);
// Extract sender domain for context // Extract sender domain for context
const senderDomain = fromEmail.includes('@') ? fromEmail.split('@')[1].toLowerCase() : fromEmail.toLowerCase(); const senderDomain = (fromEmail.split('@')[1] ?? fromEmail).toLowerCase();
// Check whether this domain is verified by the project. A verified // Check whether this domain is verified by the project. A verified
// domain means the sender proved DNS/DKIM control — strong evidence of // domain means the sender proved DNS/DKIM control — strong evidence of