Tracking links return Not Found because of safepath

[kanadaj]

Operating System

Linux

OS Version

Ubuntu 22.04 LTS

System Architecture

x86_64

Docker Version

Docker version 29.2.1, build a5c7197

Docker Compose Version

No response

Reproducible in Latest Version?

Yes, occurs in the latest stable release

Reproduction Steps

1. Set up marketing email with links in it
2. Enable tracking opens
3. Send emails
4. Copy the received link into an incognito window (so the safepath session cookie isn't set)

Observed Behavior

• Server returns Not Found

Expected Behavior

Return a redirect to the actual link after counting views

Supplemental Information

It seems the safepath check handler doesn't have the /pmta path set in https://github.com/Billionmail/BillionMail/blob/main/core/internal/cmd/cmd.go#L137 as an exception so public links get validated and rejected without the secure token.