Sending to an arbitary address just seems a great way for spammers to send spam out... It seems to defeat the point of the contactform when it's designed to go to a intended recipient

emailccsubject is a core message that we reuse...

Maybe we we should be using a different message?

Something along the lines of "Copy of your submission of $1: $2" where $1 is the title of the form (or similar) e.g. https://github.com/wikimedia/mediawiki-extensions-WikimediaMessages/blob/master/i18n/contactpage/en.json#L42, and $2 stays to be the subject?

By "arbitary address" I meant one set by the form administrator, instead of having to be that of a wikiuser account as currently is the case. Not one entered by the form user.

I'm considering working around this on the level of the UI string,

But there's also the usecase of having a workflow for handling received form submissions by one or more persons. As far as I know there's currently no way to distinguish emails sent through the form in order to set a rule, for example, to forward it to another address or autoreply.

I understand this is not the model of the current implementation, but it would be great to have.

In T201764#4498765, @ahmad wrote:

By "arbitary address" I meant one set by the form administrator, instead of having to be that of a wikiuser account as currently is the case. Not one entered by the form user.

Ok, that makes more sense. I'll update the task in a few

In T201764#4498765, @ahmad wrote:

But there's also the usecase of having a workflow for handling received form submissions by one or more persons.

At least at Wikimedia, we just use mailing lists/distribution lists or OTRS queues

In T201764#4498765, @ahmad wrote:

But there's also the usecase of having a workflow for handling received form submissions by one or more persons.

At least at Wikimedia, we just use mailing lists/distribution lists or OTRS queues

How does that work? Does the receiving wikiuser manually forward to the mailing list of a working group? Or are dummy wikiuser accounts are created in order to set their email addresses to that of the distribution list?

Yeah, "dummy" accounts are used. Often with an appropriate name/username, so the leaking you were mentioning is less of a problem

Change #1077114 had a related patch set uploaded (by Jayden Bailey; author: Jayden Bailey):

[mediawiki/extensions/ContactPage@master] Allow specifying a recipient email address

https://gerrit.wikimedia.org/r/1077114

Change #1077114 merged by jenkins-bot:

[mediawiki/extensions/ContactPage@master] Allow specifying a recipient email address

https://gerrit.wikimedia.org/r/1077114