Page 1 of 1

String "&num" is converted by the webmail after upgrade in 8.8.15 P6

Posted: Thu Feb 13, 2020 11:58 am
by jnoel
Since patch 6 or 7 of zimbra 8.8.15, in an html mail the string "&num" is converted to "#" by the zimbra webmail.

It's very annoying when you receive a url containing these characters: the link becomes invalid.

By example if someone send me :
<a href="http://example.com/&num=1">http://example.com/&num=1</a>

I receive :
<a href="http://example.com/#=1">http://example.com/#=1</a>

I filed a bug report here : https://bugzilla.zimbra.com/show_bug.cgi?id=109290

Re: String "&num" is converted by the webmail after upgrade in 8.8.15 P6

Posted: Fri Feb 14, 2020 2:28 pm
by Inglebard
Hi,

I encoutered the same issue today.

Do you find a solution or a woraround ?

Re: String "&num" is converted by the webmail after upgrade in 8.8.15 P6

Posted: Sat Feb 15, 2020 3:54 am
by jnoel
not yet
I'm still looking.

Re: String "&num" is converted by the webmail after upgrade in 8.8.15 P6

Posted: Mon Feb 17, 2020 8:52 am
by Inglebard
Do you have notice something special about the mail which has the issue ?

Because when i send a link with &num, it is not always converted.

Re: String "&num" is converted by the webmail after upgrade in 8.8.15 P6

Posted: Mon Feb 17, 2020 9:13 am
by Inglebard

Re: String "&num" is converted by the webmail after upgrade in 8.8.15 P6

Posted: Tue Feb 18, 2020 10:22 am
by zimbraLuis
Hello,

Put the parameter :

zmlocalconfig -e zimbra_use_owasp_html_sanitizer=true
zmmailboxdctl restart

It's resolve issue for me.

Regards,
Luis

Re: String "&num" is converted by the webmail after upgrade in 8.8.15 P6

Posted: Sun Mar 29, 2020 8:00 pm
by jnoel
zimbraLuis wrote:zmlocalconfig -e zimbra_use_owasp_html_sanitizer=true
zmmailboxdctl restart


Thanks Luis, it's works for me.