6.0.0-beta1
9/23/25

[#3085] Improperly formatted <a href> tags in html messages
Summary Improperly formatted <a href> tags in html messages
Queue IMP
Queue Version 4.0.3
Type Bug
State Not A Bug
Priority 1. Low
Owners
Requester mp (at) xmission (dot) com
Created 12/02/2005 (7235 days ago)
Due
Updated 12/27/2005 (7210 days ago)
Assigned 12/02/2005 (7235 days ago)
Resolved 12/27/2005 (7210 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch No

History
12/27/2005 12:13:09 PM Jan Schneider Comment #3
State ⇒ Not A Bug
Reply to this comment
Agreed, and no further feeback.
12/02/2005 10:51:22 PM Chuck Hagenbuch Comment #2
State ⇒ Feedback
Priority ⇒ 1. Low
Reply to this comment
Unless you have a patch for this that doesn't _also_ reintroduce XSS 
vulnerabilities, which always find ways to take advantage of allowing 
invalid HTML, I doubt we'll do anything about it. Personally it's more 
important to avoid exploits than to make accomodations for broken email.
12/02/2005 10:40:07 PM mp (at) xmission (dot) com Comment #1
State ⇒ Unconfirmed
Priority ⇒ 2. Medium
Type ⇒ Bug
Summary ⇒ Improperly formatted <a href> tags in html messages
Queue ⇒ IMP
Reply to this comment
When a user receives a HTML message which has an <a href=> tag in 
which the URL is not properly surrounded by quotes, Horde encodes the 
closing '>' as '%3E' which causes the opening <a> tag not to be 
closed. This prevents the linked text from showing up in the body of 
the message because the resulting HTML is invalid.



For example, a link in a body of a message such as:

<a href="http://www.horde.org>Horde</a>

works just fine.



However, the following HTML will not display the linked text in the 
IMP message view:

<a href=http://www.horde>Horde</a>



Now, I know that this is the result of invalid HTML to begin with, but 
this does work on at least some other clients, (Thunderbird for 
instance) as well as working on IMP 3.2.8. Unfortunetly, of course, 
some MUAs are still broken and this causes real headaches for users 
trying to read HTML messages sent by those clients.

Saved Queries