Package: squirrelmail
Version: 2:1.4.23~svn20120406-2
Severity: normal

Dear Maintainer,

some perfectly valid links I receive in e-mails are replaced by
"http://invalid-stuff-detected.example.com";.

Some example rejected URL:

https://www.onesite.com/shop/receipt.asp?OrderNum=99999&MyCustomer=Gu%E9rard
http://xxx.yyy.anothersite.com:8080/zzz/lu?PRO=Nonsp%E9cifi%E9

The error seems to come from /usr/share/squirrelmail/functions/mime.php:

        // first, disallow 8 bit characters and control characters
        if (preg_match('/[\0-\37\200-\377]+/',$attvalue)) {
            switch ($attname) {
                case 'href':
                    $attvalue = $sQuote . 
'http://invalid-stuff-detected.example.com' . $sQuote;
                    break;
                default:
                    $attvalue = $sQuote . SM_PATH . 'images/blank.png'. $sQuote;
                    break;
            }

Thanks.


-- System Information:
Debian Release: 7.4
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages squirrelmail depends on:
ii  lighttpd [httpd]  1.4.31-4+deb7u3
ii  perl              5.14.2-21+deb7u1
ii  php5              5.4.4-14+deb7u8
ii  php5-cgi          5.4.4-14+deb7u8

Versions of packages squirrelmail recommends:
ii  aspell [aspell-bin]       0.60.7~20110707-1
ii  ispell                    3.3.02-6
ii  php5-common [php5-mhash]  5.4.4-14+deb7u8
ii  squirrelmail-locales      1.4.18-20090526-1
ii  squirrelmail-viewashtml   3.8-3

Versions of packages squirrelmail suggests:
ii  courier-imap [imap-server]  4.10.0-20120615-1
ii  imapproxy                   1.2.7-1.1
ii  php-pear                    5.4.4-14+deb7u8
pn  php5-ldap                   <none>
ii  php5-recode                 5.4.4-14+deb7u8
ii  squirrelmail-decode         1.2-1

-- Configuration Files:
/etc/squirrelmail/apache.conf changed [not included]
/etc/squirrelmail/filters_setup.php changed [not included]

-- no debconf information

-- debsums errors found:
debsums: changed file /usr/share/squirrelmail/functions/mime.php (from 
squirrelmail package)


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to