Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge changes from on2itsecurity #5

Open
wants to merge 13 commits into
base: master
Choose a base branch
from

Conversation

patrick-othmer
Copy link
Owner

No description provided.

Roel Harbers and others added 13 commits May 10, 2021 12:27
…s an attachment whenever the `Content-Disposition` header says it is

this fixes a problem where `text/plain` attachments were interpreted as belonging to the TextBody
simplified behaviour of attachments in multipart/mixed: a mime part i…
fixed panic on maliciously crafter Content-Disposition mime headers
…pports in word-encoded mail & mime headers like From, Subject and attachment filenames
…ted multipart/mixed mimeparts

I tried to do the same for multipart/mixed that contains multipart/related,
but because the semantics of those are a bit more complex in regards to content-disposition
(eg. plain-text attachments), this isn't as simple.

We haven't seen them in the wild yet, so I don't want to break stuff without actually fixing a real problem.
don't lose previously parsed text & html parts
…-encodings

Fix fallback for unsupported encodings
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants