jadolg / webpymail

Automatically exported from code.google.com/p/webpymail
GNU General Public License v3.0
0 stars 0 forks source link

Plain message with HTML tags could be dangerous #27

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
I've sent PLAIN message with text

<strong>Test1</strong>
<br/>
<strong>Тест2</strong>

The way it looks you can find in any webpymail boxes (@yandex @rambler @gmail) 
(gmails pass is `QWEASDZXC` ). In two words: it applies HTML tags.

(in Yandex this message also has buggy Subj display, but I think this should be 
separate issue)

Original issue reported on code.google.com by akimov.alex on 24 Sep 2010 at 8:41

GoogleCodeExporter commented 9 years ago
// Yandex Subj bug can be fixed with hack:

imaplib2/utils.py
def getUnicodeHeader( header ):
    ....
    try:
        decoded_header = decode_header(header.replace('?==?', '?= =?'))
    ...

Have no ideas how to do it right.

Original comment by akimov.alex on 24 Sep 2010 at 8:46

GoogleCodeExporter commented 9 years ago
I could swear this was being done! I'm going to escape the text fed to the 
template...

Original comment by hguerreiro@gmail.com on 25 Sep 2010 at 11:29

GoogleCodeExporter commented 9 years ago
I'm going to reopen bug 22 to take care of the subject problem

Original comment by hguerreiro@gmail.com on 25 Sep 2010 at 11:33

GoogleCodeExporter commented 9 years ago
This issue was closed by revision r99.

Original comment by hguerreiro@gmail.com on 25 Sep 2010 at 11:45