MHonArc - Bugs: bug #55783, MHonArc URL parsing bug

Group

Main
- Main
- View members
- Search
Homepage
Download
Support
- Submit new
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Source code
- Use CVS
- Browse Web Pages Repository
Bugs
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Tasks
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Patches
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search

You are not allowed to post comments on this tracker with your current authentication level.

bug #55783: MHonArc URL parsing bug

Submitter:	Alexander Rosenberg <arosen66>
Submitted:	Tue 26 Feb 2019 05:29:57 AM UTC


Category:	MIME Filter	Severity:	3 - Normal
Priority:	5 - Normal	Item Group:	None
Status:	None	Privacy:	Public
Assigned to:	None	Open/Closed:	Open
Operating System:	Linux	Perl Version:	5.16.3
Component Version:	?	Fixed Release:

Tue 26 Feb 2019 05:55:37 AM UTC, comment #1:

Btw, thank you so much for developing and sharing MHonArc!

Here is an example URL:
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fl.facebook.com%2Fl.php%3Fu%3Dhttps%253A%252F%252Fwww.defcon.org%252F%253Ffbclid%253DIwAR219W3jnit9eV6gHytHC5GBe8qLSfw15DMzjZAYc_3Lrimy0Mh3BCHHpcA%26h%3DAT2ToRkgghpeK-f48JxkNf3dXQCxJQ5Jf7oTSsF8fZqz0KkuxdEWqV4JOa5olwhQv-R2iZJ9c2_NXKBltdm6AllAodNFZkpkUDL7sxw963i2aFt_d4olDwM7ISGXaafXnpcEgrU1UHds7Nf-66MQ-RIW&data=02%7C01%7CAlexander.J.Rosenberg%40hofstra.edu%7C51b18778bc51466cf3b708d68dbaef13%7Ce32fc43d7c6246d9b49fcd53ba8d9424%7C0%7C0%7C636852231363367651&sdata=rdOkEA%2FR0W%2FjmhlaViPrjSHTWZwql4svoIy%2FUvf71gU%3D&reserved=0

Alexander Rosenberg <arosen66>

Tue 26 Feb 2019 05:29:57 AM UTC, original submission:

We discovered a bug that results in malformed HTML due to the text/html filter (mhtxthtml.pl) not handling certain URLs properly. The filter incorrectly strips URLs that are in the query parameters of other URLs, such as with Outlook Safelinks URL rewriting.

The regex wrongly identifies a 'url' get parameter as an HTML attribute and then double quotes are inserted around it.

The only workaround I currently have is a hack, changing the line ~378 to read:

/join("",$1,'',&resolve_cid($onlycid, $2, $atdir),'')

Rather than:

/join("",$1,'"',&resolve_cid($onlycid, $2, $atdir),'"')

(ie, remove the double quotes)

However, there is probably a better way of fixing this.

Alexander Rosenberg <arosen66>

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

Depends on the following items: None found

Items that depend on this one: None found

Carbon-Copy List

-email is unavailable- added by arosen66

-email is unavailable- added by arosen66 (Submitted the item)

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Follows 1 latest change.

Date	Changed by	Updated Field	Previous Value	=>	Replaced by
2019-02-26	arosen66	Carbon-Copy	-		Added ehood

MHonArc - Bugs: bug #55783, MHonArc URL parsing bug

bug #55783: MHonArc URL parsing bug

<a href="#discussion">Discussion</a>

<a href="#attached">Attached Files</a>

<a href="#dependencies">Dependencies</a>

<a href="#cc">Mail Notification Carbon-Copy List</a>

<a href="#votes">Votes</a>

<a href="#history">History</a>