Addresses in smtp_always_bcc listed in Cc header when use_public_cc is enabled

[Jun Omae]

I noticed that the addresses in [notification] smtp_always_bcc are listed in Cc header of the notification mail when [notification] use_public_cc is enabled.

Return-Path: <1.4-sqlite@trac.test>
X-Original-To: 1.4-sqlite+bcc@trac.test
Received: from [127.0.0.1] (unknown [192.168.11.122])
	by localhost (Postfix) with ESMTP id 45AF682414A;
	Mon, 17 Feb 2025 02:12:45 +0900 (JST)
Content-Type: multipart/related;
 boundary="===============8362590658671035220=="
MIME-Version: 1.0
X-Mailer: Trac 1.6, by Edgewall Software
X-Trac-Version: 1.6
X-Trac-Project: 1.4-stable
X-URL:
X-Trac-Realm: ticket
Precedence: bulk
Auto-Submitted: auto-generated
Message-ID: <017.03bc072e7921ee7e4a4d7bc7a9e1c8e3@trac.test>
Date: Sun, 16 Feb 2025 17:12:45 -0000
To: undisclosed-recipients: ;
From: "1.4-stable" <1.4-sqlite@trac.test>
Cc: 1.4-sqlite+bcc@trac.test, 1.4-sqlite+cc@trac.test
Reply-To: <>
X-Trac-Ticket-ID: 27
X-Trac-Ticket-URL: http://192.168.11.122:3000/1.4-sqlite/ticket/27
Subject: [1.4-stable] #27: smtp_always_bcc testing

Adding a test case to NotificationTestCase.test_bcc_privacy, the same issue is able to be raised.

trac/ticket/tests/notification.py

@@ -482 +482 @@
             for rcpt in bccrcpt:
                 # Check the message has actually been sent to the recipients
                 self.assertIn(rcpt, rcptlist)
+                # Check the recipients have not listed in the Cc header
+                self.assertNotIn(rcpt, cc)
         for public in False, True:
             run_bcc_feature(public)
 

======================================================================
FAIL: test_bcc_privacy (trac.ticket.tests.notification.NotificationTestCase)
Visibility of recipients
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/jun66j5/src/tracdev/git/trac/ticket/tests/notification.py", line 487, in test_bcc_privacy
    run_bcc_feature(public)
  File "/home/jun66j5/src/tracdev/git/trac/ticket/tests/notification.py", line 485, in run_bcc_feature
    self.assertNotIn(rcpt, cc)
AssertionError: 'joe.foobar@example.net' unexpectedly found in ['joe.bar@example.net', 'joe.foobar@example.net', 'joe.user@example.net']

[Ryan J Ollos]

Should we release 1.6.1 soon?

[Jun Omae]

Agreed. The issue is introduced in 1.2 and doesn't seem to be noticed by anyone yet but I think we should release the fixes of this issue and #13786 as 1.6.1.

[Jun Omae]

Proposed changes in [3a6654167/jomae.git] (jomae.git@t13869).