Re: [Bug #2051] Query string including 'action=' not handled properly

2002-12-30 Thread Gunnar Hjalmarsson
Earl Hood wrote: I tested the above, and it got by the filtering also with the original code. ... Can you provide your test case? The above did get filtered from my tests. Of course, if allownoncidurls is in effect, the above will pass through. That's it, i.e. mhonarc.db included allownonci

Re: [Bug #2051] Query string including 'action=' not handled properly

2002-12-29 Thread Earl Hood
On December 29, 2002 at 00:21, Gunnar Hjalmarsson wrote: > > Content-Type: multipart/mixed; boundary="X" > > > > --X > > Content-Type: text/html > > > >> --X > > Content-Type: text/html > > > > src="http://www.mhonarc.org/MHonArc/logo/mhastampw_t.png";> > > --X

Re: [Bug #2051] Query string including 'action=' not handled properly

2002-12-28 Thread Gunnar Hjalmarsson
Earl Hood wrote: On December 27, 2002 at 01:33, Gunnar Hjalmarsson wrote: Okay... Since I couldn't re-open the bug, let me make a new try here. How about: $$data =~ s/([^\?&;]$UAttr\s*=\s*)([^\s'">][^\s>]+) -^^^ Of course, such change would have to be applied to the

Re: [Bug #2051] Query string including 'action=' not handled properly

2002-12-28 Thread Earl Hood
On December 27, 2002 at 01:33, Gunnar Hjalmarsson wrote: > Okay... Since I couldn't re-open the bug, let me make a new try here. > How about: > > $$data =~ s/([^\?&;]$UAttr\s*=\s*)([^\s'">][^\s>]+) > -^^^ Of course, such change would have to be applied to the two previ

Re: [Bug #2051] Query string including 'action=' not handled properly

2002-12-26 Thread Gunnar Hjalmarsson
Gunnar: I made MHonArc accept the occurrence of 'action=' in a query string by editing line 333 in mhtxthtml.pl: $$data =~ s/(\s$UAttr\s*=\s*)([^\s'">][^\s>]+) -^^ Earl: This is a known limitation. The change you made allows for scripting content to make it through the f

[Bug #2051] Query string including 'action=' not handled properly

2002-12-26 Thread nobody
=== BUG #2051: LATEST MODIFICATIONS == http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=2051&group_id=1968 Changes by: Earl Hood <[EMAIL PROTECTED]> Date: 2002-Dec-26 12:58 (US/Central) What | Removed | Added ---

[Bug #2051] Query string including 'action=' not handled properly

2002-12-25 Thread nobody
=== BUG #2051: FULL BUG SNAPSHOT === http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=2051&group_id=1968 Submitted by: gunnarh Project: MHonArc Submitted on: 2002-Dec-25 15:23 Category: MIME Filter Se