Zimbra 8.8.15 HTML Signature Issue

[rcardozo1987]

Hi everyone,

I think I've found some weird behavior (bug) using Zimbra ZCS 8.8.15 HTML Signature feature. Zimbra does not render the HTML correctly if I use some inline CSS style like floats or display formats. Zimbra simply removes my CSS. It seems it does not allow this kind of markup anymore. It works well in Zimbra 8.8.12. Have someone noticed it? Thanks!

Ex.: Try to use style="float:left" and style="clear:left"

[andrey.ivanov]

Have you installed patch 1 of 8.8.15 (https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P1)?

If you have installed the patch and it does not resolve your problem then i think it is another manifestation of the bugs related to the new OWASP sanitizer. Try this:

Code: Select all

zmlocalconfig -e zimbra_use_owasp_html_sanitizer=FALSE 
zmmailboxdctl restart

[rcardozo1987]

Have you installed patch 1 of 8.8.15 (https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P1)?

If you have installed the patch and it does not resolve your problem then i think it is another manifestation of the bugs related to the new OWASP sanitizer. Try this:

Code: Select all

zmlocalconfig -e zimbra_use_owasp_html_sanitizer=FALSE 
zmmailboxdctl restart

Thanks @andrey.ivanov, you are absolutely right. After set zimbra_use_owasp_html_sanitizer=FALSE and restart zmmailboxdctl my HTML signature is working again.