[Tickets #10996] Re: tooltips.js on from: generates HTML tags

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10996
------------------------------------------------------------------------------
  Ticket             | 10996
  Updated By         | viktor at szepe.net
  Summary            | tooltips.js on from: generates HTML tags
  Queue              | IMP
  Version            | 5.0.17
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              | 1
  Owners             |
------------------------------------------------------------------------------


viktor at szepe.net (2012-02-16 00:42) wrote:

> it needs a double encoder in php

imp/mailbox.php:855
needs a htmlspecialchars around $msg['fullfrom']

$msg['from'] = Horde::link(IMP::composeLink(array(), array('actionID'  
=> 'mailto', 'thismailbox' => $ob['mailbox'], 'uid' => $ob['uid'],  
'mailto' => $getfrom['to'])), sprintf(_("New Message to %s"),  
htmlspecialchars($msg['fullfrom']) )) . $msg['from'] . '</a>';