4 messages in net.sourceforge.lists.courier-sqwebmailRe: [sqwebmail] HTML email not parsin...
FromSent OnAttachments
Mike LerleyJan 16, 2007 12:05 pm.gz
Sam VarshavchikJan 16, 2007 3:58 pm 
Mike LerleyJan 17, 2007 5:48 am 
Sam VarshavchikJan 17, 2007 4:06 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [sqwebmail] HTML email not parsing correctlyActions...
From:Sam Varshavchik (mrs@courier-mta.com)
Date:Jan 17, 2007 4:06:00 pm
List:net.sourceforge.lists.courier-sqwebmail

Mike Lerley writes:

That's exactly my point -- what you quote above is what sqwebmail is rendering the message as. The original email message, which I attached to my last post as a gzipped file, contains the image. Sorry if I wasn't clear. If you need the message source in a different format please let me know.

The problem is a bug in the sending E-mail software. Quoting the HTML markup in the original message, with the interesting parts underlined:

<img border=3D0 hspace=3D0 vspace=3D0 align=3DLeft src=3D"cid:image001.jpg@01C73979.671601B0" title=3D"$268,000&#13;Excellent condition l…" ==== alt=3D"$268,000&#13;Excellent condition large 2,158 s ====

The sending E-mail software is using HTML-escaped entities to encode control characters in markup tags. Sqwebmail's HTML filter was updated to aggressively filter them out, since this is indistinguishable from attempted cross-site scripting attacks designed to bypass webmail security.