Email display problem, content missing

Post feedback about our hosted demo or your local install. Tell us what you love and/or what you’d like to see added in the future.
hmmblah
Advanced member
Advanced member
Posts: 53
Joined: Fri Sep 12, 2014 11:44 pm
ZCS/ZD Version: Zimbra 8.8.10_GA_3041

Re: Email display problem, content missing

Post by hmmblah »

I have been having this same issue for quite sometime now and the fix posted worked for me as well. Thank you!
User avatar
Rony
Posts: 45
Joined: Fri Jan 27, 2017 3:50 pm
Location: Canada-Montreal
ZCS/ZD Version: Zimbra 9.0.0_GA_4174
Contact:

Re: Email display problem, content missing

Post by Rony »

Hi,
I have been encountering this issue and I don't understand where to make the changes, should it be on the Zimbra side?
the solution in the previous link is not helping as the email is not from Nextcloud but from other services.
Thank you
User avatar
gabrieles
Outstanding Member
Outstanding Member
Posts: 233
Joined: Tue Feb 14, 2017 9:40 am

Re: Email display problem, content missing

Post by gabrieles »

We're having similar issues, not only from nextcloud but from various services.
We pointed the OWASP first, and opened a case to zimbra support. We're waiting for them
User avatar
Rony
Posts: 45
Joined: Fri Jan 27, 2017 3:50 pm
Location: Canada-Montreal
ZCS/ZD Version: Zimbra 9.0.0_GA_4174
Contact:

Re: Email display problem, content missing

Post by Rony »

Hi Gabrieles,

It would be helpful to diagnose this display issues, I moved to Outlook last year because of that but now Outlook is not synchronizing well with the Zimbra and gets stuck, so I moved again to the web browser.
the issue is not depending on the browser as I tried in Firefox and Chrome, strangely the content shows on iPad or iOS.
Even forwarding the email doesn't show it at reception as the email goes out kind of empty.
Thank you for the update.
mgarbin
Posts: 35
Joined: Wed Jun 26, 2019 11:00 am

Re: Email display problem, content missing

Post by mgarbin »

Try to disable owasp :

su - zimbra
zmlocalconfig -e 'zimbra_use_owasp_html_sanitizer=false'
zmmailboxdctl restart
User avatar
Rony
Posts: 45
Joined: Fri Jan 27, 2017 3:50 pm
Location: Canada-Montreal
ZCS/ZD Version: Zimbra 9.0.0_GA_4174
Contact:

Re: Email display problem, content missing

Post by Rony »

Hi Mgarbin,

Fantastic! that solved the problem, it should be in the administrator guide as a clearly mentioned information.
Thank you very much

:)
User avatar
gabrieles
Outstanding Member
Outstanding Member
Posts: 233
Joined: Tue Feb 14, 2017 9:40 am

Re: Email display problem, content missing

Post by gabrieles »

Rony wrote:that solved the problem
NO! disabling a security feature is never a solution. You are now able to get fantastic miners and cryptolockers in HTML messages.
Every time that this stupid behaviour occurs, owasp disabling is proposed as the main solution and everyone lives happily ever after. No one opens a case to zimbra, so they never fix that s**t. And regularly a message "i have a weird display problem" appears on the forum...
User avatar
Rony
Posts: 45
Joined: Fri Jan 27, 2017 3:50 pm
Location: Canada-Montreal
ZCS/ZD Version: Zimbra 9.0.0_GA_4174
Contact:

Re: Email display problem, content missing

Post by Rony »

Hi Gabrieles,

I am not an old admin for Zimbra and lacking some experience, I guess you are right, I will enable it again then, thank you for informing us about that.
I was glad it worked but then security is more important as you stated.
User avatar
zimico
Outstanding Member
Outstanding Member
Posts: 225
Joined: Mon Nov 14, 2016 8:03 am
Location: Vietnam
ZCS/ZD Version: 8.8.15 P3
Contact:

Re: Email display problem, content missing

Post by zimico »

This kind of OWASP sanitizer issue is identified as a bug number ZBUG-1858. Hope that Zimbra will have a fix soon.

Best regards,
Minh
Post Reply