Skip to content

Function: assertSenderAllowed()

assertSenderAllowed(from, patterns): void

Throw when from is not permitted by the allow-list. No-op when the allow-list is empty. The single enforcement point for the restriction (called from sendEmail), so every send path is covered whether the address was derived server-side or chosen in a UI.

string

string[]

void