kaffa / textpattern

Automatically exported from code.google.com/p/textpattern
0 stars 0 forks source link

Certain characters in users' real names cause invalid SMTP headers #353

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?

1. Create a user with a real name containing one or more characters which are 
special to the SMTP protocol (single quote, double quote, left or right angle 
brackets), e.g. /Richard O'Brien/ or /<FOO><BAR>/
2. Login as this user and create a new user to send a sign-up email, or perform 
any other action which causes Textpattern to send an email with a "From:" 
header from this user.

What is the expected output? What do you see instead?

- Expected: "From:" headers intact
- Actual result: "From:" headers mangled by double backslashes, or invalidated 
by including unescaped angle brackets.

Original issue reported on code.google.com by r.wetzlmayr on 7 Jan 2013 at 7:59