[wp-trac] [WordPress Trac] #39714: Proposal: Use Full PHPMailer library

[WordPress Trac]

#39714: Proposal: Use Full PHPMailer library
--------------------------------+-----------------------------
 Reporter:  Ipstenu             |      Owner:
     Type:  enhancement         |     Status:  new
 Priority:  normal              |  Milestone:  Awaiting Review
Component:  External Libraries  |    Version:
 Severity:  normal              |   Keywords:
  Focuses:                      |
--------------------------------+-----------------------------
 Currently we're using a customized version of phpMailer that strips out
 some features. This is most evident when you compare class.smtp.php:

 Ours: https://core.trac.wordpress.org/browser/trunk/src/wp-includes/class-
 smtp.php#L465

 Official:
 https://github.com/PHPMailer/PHPMailer/blob/v5.2.21/class.smtp.php#L465-L527

 We're missing sections which plugin developers are using to support
 extended features (oauth, ntlm, etc). By leaving this out, we introduce a
 reason for them to include versions of PHPMailer which they then have to
 update in the case of security issues (such as the sort that predicated
 the 4.7.1 core release).

 If we were to include the full library, it would be easier (and faster)
 for core to update in case of security issues, and it would provide more
 flexibility and security for plugins and (by extension) users of
 WordPress.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39714>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform