Function headerSafe

internal/agent/screening.go:138–140

headerSafe strips CR/LF so attacker-controlled subject/filename/content-type can't inject extra headers into the reconstructed scan MIME.

(s string)

// headerSafe strips CR/LF so attacker-controlled subject/filename/content-type can't
// inject extra headers into the reconstructed scan MIME.
func headerSafe(s string) string {
	return strings.NewReplacer("\r", "", "\n", "", "\"", "").Replace(s)
}

// blockAuditID derives a STABLE soft-ref message id for a blocked send. A block
// persists no message row, so the audit/event must anchor to a deterministic id