Re: [SM-DEVEL] bogus image links in an HTML message cause logout

[Brad D. <buc...@us...>]

Jonathan Angliss wrote:
>> I think there is an issue with sanitise. Here is the initial portion
>> of the message that causes the problems:
>> <CENTER><IMG=20
>> src=3D"CID:{5715D845-709F-473F-9C5F-941EFA1CAE83}/christmas 04
>> supporters.jpg"></CENTER>
>
> http://sourceforge.net/tracker/index.php?func=detail&aid=855320&group_id=311&atid=100311
>
> That looks very much like that bug.  Unfortunately I've not had a
> good chance to take a look at it.  What versions do you run? Have
> you tested with the latest RC1, or devel brances?

It was my thought that sanitise was doing this as well. I have this
problem with 1.43a  + security patch and I just tried it with 1.5 CVS
updated as of a few minutes ago.

The attachment is there but there was no content-id field for the attached
file.

Any thoughts on how to override what sanitize does in these cases? Perhaps
rather than returning <img src=/> would <img src=""> be a valid option for
sanitize to build.

Many thx,

Brad
--
Last time I had this much fun was, ... uh ...