bugMHonArc - Bugs: bug #55783, MHonArc URL parsing bug

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #55783: MHonArc URL parsing bug

Submitted by:  Alexander Rosenberg <arosen66>
Submitted on:  Tue 26 Feb 2019 05:29:57 AM UTC  
 
Category:  MIME Filter Severity:  3 - Normal
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Open/Closed:  Open
Operating System:  Linux Perl Version:  5.16.3
Component Version:  ? Fixed Release: 

Tue 26 Feb 2019 05:55:37 AM UTC, comment #1:

Btw, thank you so much for developing and sharing MHonArc!

Here is an example URL:
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fl.facebook.com%2Fl.php%3Fu%3Dhttps%253A%252F%252Fwww.defcon.org%252F%253Ffbclid%253DIwAR219W3jnit9eV6gHytHC5GBe8qLSfw15DMzjZAYc_3Lrimy0Mh3BCHHpcA%26h%3DAT2ToRkgghpeK-f48JxkNf3dXQCxJQ5Jf7oTSsF8fZqz0KkuxdEWqV4JOa5olwhQv-R2iZJ9c2_NXKBltdm6AllAodNFZkpkUDL7sxw963i2aFt_d4olDwM7ISGXaafXnpcEgrU1UHds7Nf-66MQ-RIW&data=02%7C01%7CAlexander.J.Rosenberg%40hofstra.edu%7C51b18778bc51466cf3b708d68dbaef13%7Ce32fc43d7c6246d9b49fcd53ba8d9424%7C0%7C0%7C636852231363367651&sdata=rdOkEA%2FR0W%2FjmhlaViPrjSHTWZwql4svoIy%2FUvf71gU%3D&reserved=0

Alexander Rosenberg <arosen66>
Tue 26 Feb 2019 05:29:57 AM UTC, original submission:

We discovered a bug that results in malformed HTML due to the text/html filter (mhtxthtml.pl) not handling certain URLs properly. The filter incorrectly strips URLs that are in the query parameters of other URLs, such as with Outlook Safelinks URL rewriting.

The regex wrongly identifies a 'url' get parameter as an HTML attribute and then double quotes are inserted around it.

The only workaround I currently have is a hack, changing the line ~378 to read:

/join("",$1,'',&resolve_cid($onlycid, $2, $atdir),'')

Rather than:

/join("",$1,'"',&resolve_cid($onlycid, $2, $atdir),'"')

(ie, remove the double quotes)

However, there is probably a better way of fixing this.

Alexander Rosenberg <arosen66>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by arosen66
  • -email is unavailable- added by arosen66 (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-02-26 arosen66 Carbon-Copy- => Added ehood

    Back to the top


    Powered by Savane 3.4