# Email Injection Protection

**URL:** <https://www.ruby-forum.com/t/email-injection-protection/81879>\
**Category:** Rails\
**Created:** [January 15, 2007, 11:17pm UTC](https://www.ruby-forum.com/t/email-injection-protection/81879 "2007-01-15T23:17:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jeff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e19b73/32.png) [@jeff](https://www.ruby-forum.com/u/jeff)\
**Post date:** [January 15, 2007, 11:17pm UTC](https://www.ruby-forum.com/t/email-injection-protection/81879/1 "2007-01-15T23:17:25Z")

</div>

Does anyone have any suggestions for protecting against email injection  
attacks in Rails?

Thanks,  
Jeff

---

<div class="post-metadata">

**Author:** ![jeff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e19b73/32.png) [@jeff](https://www.ruby-forum.com/u/jeff)\
**Post date:** [January 16, 2007, 12:46am UTC](https://www.ruby-forum.com/t/email-injection-protection/81879/2 "2007-01-16T00:46:34Z")

</div>

Specifically, I’m referring to attacks where someone injects form input  
with additional headers (such as %0Abcc:) that allow them to use the  
targeted server to send spam.

---

<div class="post-metadata">

**Author:** ![jeff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e19b73/32.png) [@jeff](https://www.ruby-forum.com/u/jeff)\
**Post date:** [January 16, 2007, 7:57am UTC](https://www.ruby-forum.com/t/email-injection-protection/81879/3 "2007-01-16T07:57:21Z")

</div>

Check out the ‘validate\_request’ plugin.

\_Kevin