search

beznogno / pyicqt

Automatically exported from code.google.com/p/pyicqt
GNU General Public License v2.0
0 stars 0 forks source link

Can't receive ICQ message with HTML tags #154

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
I using latest version of pyicqt (from git at issue 148) and PSI 0.13 as
Jabber client.
And I can't receive the message, contains html tags from QIP Infinum client
(Build 9020 RC3).

When user send me the text:
<body onLoad="window.resizeTo(100,100);">
I receives nothing. Other text I receives normally.

I can't receive thouse messages too (one line per message):
Test <body onLoad="window.resizeTo(100,100);"> test
Test <body onLoad="window.resizeTo(100,100);">
<body aa=bb>
Test <body aa=bb> test

I have the same problems with other ICQ users with different clients (PSI,
Miranda, etc), but don't have a messages that they sent to me.

Original issue reported on code.google.com by Mur...@gmail.com on 15 Jan 2009 at 1:43

GoogleCodeExporter commented 9 years ago 
I test sending from Kopete ICQ to pyicqt:
<body aa=bb>
received succesfully
est <body aa=bb> test
received succesfully
Test <body onLoad="window.resizeTo(100,100);"> test
don't received
<body onLoad="window.resizeTo(100,100);">
don't received
Test <body onLoad=> test
don't received
Test <body onLoad> test
received
Test <body > test
received

Original comment by Mur...@gmail.com on 15 Jan 2009 at 1:50

GoogleCodeExporter commented 9 years ago 
It's interesting problem.
But it's not a transport issue, it's design of a protocol.

Native ICQ clients have full support of HTML markup and interprets it.
When anybody sends message like your example <body
onLoad="window.resizeTo(100,100);"> server _auto_ analyzes it.
Text after onLoad looks like potential dangerous script (even for browser) and 
server
blocks it.

Isn't so bad. Filtration on server-side in some cases useful. For example, 
server
blocks some sorts of a spam.

Client can only mangle xml-symbols - < instead of < and other

Original comment by r000ns...@gmail.com on 15 Jan 2009 at 3:58

GoogleCodeExporter commented 9 years ago

Original comment by r000ns...@gmail.com on 16 Feb 2009 at 10:29