We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
People shouldn’t be able to set a custom_header with an accent, which makes Sympa crash.
People can set a custom_header with an accent, which makes Sympa crash.
We could set a pattern attribute to the input field, like ^[a-zA-Z0-9]*$, or set a similar validation in the backend.
pattern
^[a-zA-Z0-9]*$
A user has set X-Expéditeur as custom_header, which made sympa_msg crash, preventing to keep processing other mails.
X-Expéditeur
Crash log:
2024-05-14T15:59:11.054874+02:00 rod3 sympa_msg[2057866]: err main::#242 > Sympa::Spindle::spin#95 > Sympa::Spindle::TransformOutgoing::_twist#105 > Sympa::Message::add_header#399 > Mail::Header::add#472 > Mail::Header::_fmt_line#163 > Carp::croak#289 DIED: Bad RFC822 field name 'X-Expéditeur' at /home/sympa/bin/Sympa/Message.pm line 399.
The text was updated successfully, but these errors were encountered:
RFC 5322 says (in section 2.2 "Header fields"):
A field name MUST be composed of printable US-ASCII characters (i.e., characters that have values between 33 and 126, inclusive), except colon.
Thus, I suppose, it should not contain accented characters.
Sorry, something went wrong.
Prevent custom_header with non-ASCII characters (sympa-community#1840)
55598ae
Merge pull request #1844 from ikedas/issue-1840 by ikedas
ef67c0f
Prevent custom_header with non-ASCII characters (#1840)
Successfully merging a pull request may close this issue.
Expected Behavior
People shouldn’t be able to set a custom_header with an accent, which makes Sympa crash.
Current Behavior
People can set a custom_header with an accent, which makes Sympa crash.
Possible Solution
We could set a
pattern
attribute to the input field, like^[a-zA-Z0-9]*$
, or set a similar validation in the backend.Context
A user has set
X-Expéditeur
as custom_header, which made sympa_msg crash, preventing to keep processing other mails.Crash log:
The text was updated successfully, but these errors were encountered: