Page 1 of 1

Zimbra 8.8.15 HTML Signature Issue

Posted: Tue Sep 10, 2019 10:13 pm
by rcardozo1987
Hi everyone,

I think I've found some weird behavior (bug) using Zimbra ZCS 8.8.15 HTML Signature feature. Zimbra does not render the HTML correctly if I use some inline CSS style like floats or display formats. Zimbra simply removes my CSS. It seems it does not allow this kind of markup anymore. It works well in Zimbra 8.8.12. Have someone noticed it? Thanks!

Ex.: Try to use style="float:left" and style="clear:left"

Re: Zimbra 8.8.15 HTML Signature Issue

Posted: Wed Sep 11, 2019 8:26 am
by andrey.ivanov
Have you installed patch 1 of 8.8.15 (https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P1)?

If you have installed the patch and it does not resolve your problem then i think it is another manifestation of the bugs related to the new OWASP sanitizer. Try this:

Code: Select all

zmlocalconfig -e zimbra_use_owasp_html_sanitizer=FALSE 
zmmailboxdctl restart

Re: Zimbra 8.8.15 HTML Signature Issue

Posted: Wed Sep 11, 2019 2:54 pm
by rcardozo1987
andrey.ivanov wrote:Have you installed patch 1 of 8.8.15 (https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P1)?

If you have installed the patch and it does not resolve your problem then i think it is another manifestation of the bugs related to the new OWASP sanitizer. Try this:

Code: Select all

zmlocalconfig -e zimbra_use_owasp_html_sanitizer=FALSE 
zmmailboxdctl restart
Thanks @andrey.ivanov, you are absolutely right. After set zimbra_use_owasp_html_sanitizer=FALSE and restart zmmailboxdctl my HTML signature is working again. :D