#123 Characters not displayed correctly in html

[Graeme Neatham]

SM 1.4.5, Apache 2, php 4.4.0, Courier-imap 4.0.4, Free
BSD 5.3

default language en_US, default charset iso-8859-1

Email headers:-
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"

When viewing this email as html the special characters
are not shown correctly. They are, however, correctly
displayed if I switch to view as plain text..

[Tomas Kuliavas]

Logged In: YES
user_id=225877

See 1195232 patch.

SquirrelMail 1.5.1cvs can use iframes to display html messages.

[Graeme Neatham]

Logged In: YES
user_id=619840

thanks for the pointer to the patch - although it's against 1.4.4
it seems to have worked for 1.4.5 with only the first part of the
i18n.php diff needing to be applied manually.

[Tomas Kuliavas]

Logged In: YES
user_id=225877

Issue should be fixed in 1.5.1cvs functions/i18n.php 1.217
and functions/mime.php 1.352.

Stable SquirrelMail versions need fewer changes because
SM-1_4-STABLE doesn't use iframes in formatBody() and
recode/iconv in charset_decode.

I suspect that charset_decode() in html should not open any
XSS issues, but can't be 100% sure about it. Function should
not undo any htmlspecialchars applied by magicHTML()
functions and should not undo or break any other special
html entities inserted in html mail body.

Moving bug to stable tracker.

[Tomas Kuliavas]

Logged In: YES
user_id=225877

Fixed in 1.4.6cvs.

functions/i18n.php v 1.129.2.41
functions/mime.php v 1.265.2.53
src/view_text.php v 1.17.2.7