Exempt backend emails from mail_security filtering

[Copilot]

Mail security was filtering all PHPMailer emails, blocking backend administrative actions. Per issue description, filtering should only apply to frontend requests.

Changes

Core Logic (lib/MailSecurityFilter.php)

• Added backend check in filterMail() to bypass filtering for rex::isBackend() requests
• Backend emails now skip badword filtering, rate limiting, IP blocklists, and code injection detection

public static function filterMail(rex_extension_point $ep): mixed
{
    if (!self::isMailSecurityActive()) {
        return $ep->getSubject();
    }

    // Mail Security soll nur im Frontend gelten, nicht im Backend
    if (rex::isBackend()) {
        return $ep->getSubject();
    }
    
    // ... filtering logic continues for frontend requests
}

Documentation

• Updated MAIL_SECURITY.md and README.md to clarify frontend-only filtering scope

Original prompt

---

This section details on the original issue you should resolve

<issue_title>mail_security soll nur im Frontend gelten</issue_title>
<issue_description>Aktuell blockt mail_security auch backend aktionen. Das sollte nicht der Fall sein. </issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes mail_security soll nur im Frontend gelten #63

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull Request Overview

This PR exempts backend emails from mail security filtering to prevent administrative emails from being blocked. The change adds a simple backend check that bypasses all mail security filtering (badword detection, rate limiting, IP blocklists, and code injection detection) for emails sent from REDAXO backend requests.

Key changes:

• Added rex::isBackend() check in MailSecurityFilter::filterMail() to bypass filtering for backend contexts
• Updated documentation in README.md and MAIL_SECURITY.md to clarify frontend-only filtering scope

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
lib/MailSecurityFilter.php	Added backend check to exempt backend emails from all security filtering
README.md	Added note clarifying that mail security only applies to frontend emails
MAIL_SECURITY.md	Added important notice about frontend-only filtering scope in German documentation

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.