#123 Characters not displayed correctly in html


SM 1.4.5, Apache 2, php 4.4.0, Courier-imap 4.0.4, Free
BSD 5.3

default language en_US, default charset iso-8859-1

Email headers:-
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"

When viewing this email as html the special characters
are not shown correctly. They are, however, correctly
displayed if I switch to view as plain text..


  • Tomas Kuliavas

    Tomas Kuliavas - 2005-08-15

    Logged In: YES

    See 1195232 patch.

    SquirrelMail 1.5.1cvs can use iframes to display html messages.

  • Graeme Neatham

    Graeme Neatham - 2005-08-16

    Logged In: YES

    thanks for the pointer to the patch - although it's against 1.4.4
    it seems to have worked for 1.4.5 with only the first part of the
    i18n.php diff needing to be applied manually.

  • Tomas Kuliavas

    Tomas Kuliavas - 2005-08-16
    • assigned_to: nobody --> tokul
  • Tomas Kuliavas

    Tomas Kuliavas - 2005-08-21
    • labels: 102904 -->
    • milestone: 102172 -->
  • Tomas Kuliavas

    Tomas Kuliavas - 2005-08-21

    Logged In: YES

    Issue should be fixed in 1.5.1cvs functions/i18n.php 1.217
    and functions/mime.php 1.352.

    Stable SquirrelMail versions need fewer changes because
    SM-1_4-STABLE doesn't use iframes in formatBody() and
    recode/iconv in charset_decode.

    I suspect that charset_decode() in html should not open any
    XSS issues, but can't be 100% sure about it. Function should
    not undo any htmlspecialchars applied by magicHTML()
    functions and should not undo or break any other special
    html entities inserted in html mail body.

    Moving bug to stable tracker.

  • Tomas Kuliavas

    Tomas Kuliavas - 2005-10-10
    • status: open --> closed-fixed
  • Tomas Kuliavas

    Tomas Kuliavas - 2005-10-10

    Logged In: YES

    Fixed in 1.4.6cvs.

    functions/i18n.php v
    functions/mime.php v
    src/view_text.php v


Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

No, thanks