Fix a security vulnerability: eval used in quoting display name0.9.0.8

This use of eval allows arbitrary remote code execution on
parsing of a maliciously formed email.

1 files changed, 1 insertions, 1 deletions

diff --git a/lib/mail_handler/backends/mail_backend.rb b/lib/mail_handler/backends/mail_backend.rb
index 0a12ab3bb..5c54fe7e2 100644
--- a/lib/mail_handler/backends/mail_backend.rb
+++ b/lib/mail_handler/backends/mail_backend.rb
@@ -77,7 +77,7 @@ module MailHandler
                     if first_from.is_a?(String)
                         return nil
                     else
-                        return first_from.display_name ? eval(%Q{"#{first_from.display_name}"}) : nil
+                        return (first_from.display_name || nil)
                     end
                 else
                     return nil