[Tickets #9842] Re: Cyrus IMAP server does not support extended search with charset/suhosin broken

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9842
------------------------------------------------------------------------------
  Ticket             | 9842
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | Cyrus IMAP server does not support extended search with
                     | charset/suhosin broken
  Queue              | IMP
  Version            | 5.0
  Type               | Bug
-State              | Resolved
+State              | Assigned
  Priority           | 2. Medium
-Milestone          |
+Milestone          | 5.1
  Patch              |
  Owners             | Michael Slusarz
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2011-05-18 05:52) wrote:

Unfortunately, it appears that debian may ship PHP by default with  
suhosin.  Which is stupid but whatever.  (The benefits of suhosin (are  
there any?) are entirely debatable.  Completely breaking  
functionality, in the name of quote security unquote, is not a valid  
solution.  But I guess you throw the security term around and people  
will pick up on it as a buzz word so they will use your product, no  
matter what it actually does.  Off soapbox).

So to avoid IMP being broken on all debian servers by default, and to  
work around this issue, we will instead always pass around the mailbox  
in form data (both POST and GET) as base64url encoded.  I have locally  
fixed this and will commit to the develop branch (or a imp 5.1 topic  
branch) as soon as I am finished testing/squashing all the bugs.