nexxo 99b7393361 Stop committing a real password, and say the truth about what carried over ... MailboxSeedMigrationTest.php had the actual .env MAIL_PASSWORD for no-reply@clupilot.com hard-coded into a test fixture — replaced with an obvious dummy. Grepped the whole branch (576cfca..HEAD) and the working tree for that string and for every other real secret value in .env; nothing else leaked. Separately, the seed migration's SECRETS_KEY-missing warning claimed a password "was NOT copied into the mailbox table" even when a vault row already existed and its ciphertext WAS carried across a few lines below, unconditionally on $canEncrypt. An operator debugging a live mail outage would have been sent to re-enter a password that was already sitting in the column. The warning now distinguishes the two cases and says which one actually happened.		2026-07-28 03:49:37 +02:00
..
MailSettingsPageTest.php	Prove a mailbox works by actually sending from it	2026-07-28 02:56:47 +02:00
MailboxModelTest.php	Move the one SMTP account into the mailbox table it outgrew	2026-07-28 00:24:54 +02:00
MailboxResolverTest.php	Move the one SMTP account into the mailbox table it outgrew	2026-07-28 00:24:54 +02:00
MailboxSeedMigrationTest.php	Stop committing a real password, and say the truth about what carried over	2026-07-28 03:49:37 +02:00
MailboxTakeoverTest.php	Close the data-loss paths the review found in the mailbox takeover	2026-07-28 01:15:50 +02:00
MailboxTesterTest.php	Prove a mailbox works by actually sending from it	2026-07-28 02:56:47 +02:00
MailboxTransportTest.php	Move the one SMTP account into the mailbox table it outgrew	2026-07-28 00:24:54 +02:00
SenderAddressTest.php	Move the one SMTP account into the mailbox table it outgrew	2026-07-28 00:24:54 +02:00