bugMHonArc - Bugs: bug #2051, Query string including 'action='...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #2051: Query string including 'action=' not handled properly

Submitted by:  Gunnar Hjalmarsson <gunnarh>
Submitted on:  Wed 25 Dec 2002 03:23:09 PM UTC  
 
Category: MIME FilterSeverity: 3 - Normal
Priority: 5 - NormalItem Group: Incorrect Behavior
Status: Wont FixPrivacy: Public
Assigned to: NoneOpen/Closed: Closed
Operating System: AllPerl Version: Any
Component Version: mhtxthtml.pl,v 2.30Fixed Release: 

Thu 26 Dec 2002 06:58:13 PM UTC, comment #1:
[Limitation]

This is a known limitation. The change you made allows
for scripting content to make it through the filtering,
so it will not be used. Example:

<a href="/"onmouseover="javascript:alert('onmouseover');"

>Server Home</a>


The ideal solution is to parse HTML tags, but it is
a low priority right now, and would require testing to
make sure XSS vulnerabilities are not introduced.

Earl Hood <ehood>
Project Administrator
Wed 25 Dec 2002 03:23:09 PM UTC, original submission:

When converting a text/html message with the URL:
http://phenomenalmen.com/profiles/pm.cgi?action=display&login=forrest_horn
MHonArc screwed up the HTML source. The problem seems to be that both this query string and the $UAttr variable includes the string 'action'.

I made MHonArc accept the occurrence of 'action=' in a query string by editing line 333 in mhtxthtml.pl:

$$data =~ s/(\s$UAttr\s=\s)([^\s'">][^\s>]+)
-----------------^^

/ Gunnar

Gunnar Hjalmarsson <gunnarh>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 2 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Thu 26 Dec 2002 06:58:13 PM UTCehoodOpen/ClosedOpen=>(Error - Not Found)
Thu 26 Dec 2002 06:58:12 PM UTCehoodStatusNone=>(Error - Not Found)

Back to the top


Powered by Savane 3.1-cleanup1