Well, correct me if I'm wrong, but I believe what you're suggesting (running 
each header though a validator that checks it for RFC compliance and discards 
non-compliant headers) would require significantly more "hoop jumping" than 
escaping quotes in the headers.  That said I'm not familiar with the the 
governing RFCs, so I'm not sure if this is the best solution.  What I am sure 
is that I don't want people to be able to send me e-mails (by accident, not 
maliciously, mind you) that break RC.

-Charles

On Tue, 25 Apr 2006 00:33:44 +0200, "B. Johannessen" <[EMAIL PROTECTED]> wrote:
> Charles McNulty wrote:
>> I recieved the following message which RC choked on:
>> ..
>> From: Dell Member Program <[EMAIL PROTECTED]>"
>>
>> Notice the double quote just hanging out there in the From address. This
>> fubars the HTML which then messes up the JS call.  It would seem that we
>> need to escape headers.
> 
> That's an invalid RFC 2822 From: header. I see no reason for RoundCube
> to jump through hoops trying to accommodate messages that are this
> severely broken.
> 
> If anything, the above From: header field should simply be ignored.
> 
> 
>       Bob



Reply via email to