You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2008/02/25 22:59:28 UTC

[Bug 5836] New: SpamAssassin doesn't decode URL-encoding in mailto: scheme urls

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5836

           Summary: SpamAssassin doesn't decode URL-encoding in mailto:
                    scheme urls
           Product: Spamassassin
           Version: 3.2.4
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: spamassassin
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: yyang@proofpoint.com
                CC: jgmyers@proofpoint.com


Spammers start to do URL-encoding in mailto scheme, something like this:

<A HREF="mailto:someaddress@apache%2Eorg">someaddress@apache%2Eorg</a>

And the url list returned by SpamAssasin would look like:

mailto:someaddress@apache%2Eorg

Looks like that API uri_list_canonify() in Util.pm ignores mailto when doing
canonify process.

Will attach test case.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5836] SpamAssassin doesn't decode URL-encoding in mailto: scheme urls

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5836


sidney@sidney.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE




------- Additional Comments From sidney@sidney.com  2008-02-25 14:56 -------
This test case already works in trunk due to the changes I made for bug 5780.

Here's a reminder to committers that we need one more vote for the fixes to bug
5780 and bug 5813 so I can commit their combined patch to the 3.2 branch.

Closing this bug as a duplicate of bug 5780.


*** This bug has been marked as a duplicate of 5780 ***



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5836] SpamAssassin doesn't decode URL-encoding in mailto: scheme urls

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5836





------- Additional Comments From yyang@proofpoint.com  2008-02-25 14:02 -------
Created an attachment (id=4264)
 --> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4264&action=view)
Test case that contains url-encoded mailto address




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5836] SpamAssassin doesn't decode URL-encoding in mailto: scheme urls

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5836





------- Additional Comments From yyang@proofpoint.com  2008-02-25 14:06 -------
Created an attachment (id=4265)
 --> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4265&action=view)
The proposed patch to do url-decoding for mailto scheme as well

Not sure if there was any performance concern or any other implications so the
mailto scheme was ignored in uri_list_canonify() in Util.pm.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.