Re: [imp] Horde v 5.2.22 vulnerability – obfuscation via HTML encoding – XSS payload

2025-03-24 Thread Jens Wahnes
Patrick Boutilier wrote: On 3/24/25 12:09 PM, Jens Wahnes wrote: Patrick Boutilier wrote: On 2025-03-24 07:16, Jens Wahnes wrote: One solution I found to filter out the malicious content from emails like the one Nataša described was to tighten the code used to sanitize HTML in e-mails. This

Re: [imp] Horde v 5.2.22 vulnerability – obfuscation via HTML encoding – XSS payload

2025-03-24 Thread Jens Wahnes
Hi Patrick, Patrick Boutilier wrote: On 2025-03-24 07:16, Jens Wahnes wrote: One solution I found to filter out the malicious content from emails like the one Nataša described was to tighten the code used to sanitize HTML in e-mails. This is found in the imp/lib/Mime/Viewer/Html.php file

Re: [imp] Horde v 5.2.22 vulnerability – obfuscation via HTML encoding – XSS payload

2025-03-24 Thread Jens Wahnes
Hi Nataša, thank you for reporting this to the mailing list, so that users of Horde can react to this, despite the foundered Horde development in general. At first, I was a bit confused about your report, when you mentioned boundaries and base64 encoding. My initial thought was that the probl

Re: [imp] Spam / Innocent buttons

2021-03-26 Thread Jens Wahnes
Simon Wilson wrote: Is there a way to have the 'Innocent' button shown on Inbox (dynamic view) for one user only? Yes, you can do this by defining several mail server backends in Imp's backends.local.php. Besides your regular backend that everybody is using, make a copy of that backend and e

Re: [imp] bcc heades not included in copy in sent mail folder

2020-07-14 Thread Jens Wahnes
Michael Menge wrote: in IMP H5 6.2.x the bcc header is not included in the copy of the mail that is saved in the sent mail folder. Is this a bug, or working as intended. If it is the later, what is the reason? It's a bug, introduced by the recently released version 6.2.25 and present in 6.2.

Re: [imp] Identiies vs Aliases

2020-01-30 Thread Jens Wahnes
Simon B wrote: why, therefore, does one need both if they do the same thing? That doesn't make sense. They don't do the same thing. Like I said, only addresses listed as alias addresses are removed from the list of recipients when replying. Or in more general terms: alias addresses are tre

Re: [imp] Identiies vs Aliases

2020-01-28 Thread Jens Wahnes
Simon B wrote: For example, if my default identity issi...@example.com and I have an identity assi...@example.net, puttingsi...@example.net into those boxes, means that when an email is addressed tosi...@example.net, the reply comes from the default identity. Well, that's what both alias addr

Re: [imp] How can I set the email signature above the reply?

2019-11-01 Thread Jens Wahnes
ersrpca001 ersrpca001 wrote: How can I set the email signature above the reply? See the archives of this mailing list, e.g. https://www.mail-archive.com/imp@lists.horde.org/msg10152.html Jens -- imp mailing list Frequently Asked Questions: http://wiki.horde.org/FAQ To unsubscribe, mail: imp-

Re: [imp] Avoiding duplicate mails reg.

2019-11-01 Thread Jens Wahnes
ANANT S ATHAVALE wrote: Is there a configuration in IMP, where I can suppress populating the old domain for self email address? You need each user's identity to contain their respective old address as an alias address. This will prevent Imp from replying to oneself when answering an email tha

Re: [imp] problem with searches in Horde/IMP webmail

2019-06-25 Thread Jens Wahnes
David Topping wrote: Up until several days ago, the results of a search spanned my entire Inbox (or my entire email account when adding "All Mailboxes" in the Advanced search options). Recently, my search results only show the last day or two of results, even though there should be MANY older r

Re: [imp] changing signature at once for all users

2018-08-15 Thread Jens Wahnes
Cristian-Petru Pencov wrote: I'm again in situation to replace some text in user's signature for more than fifty accounts. with the usual "SQL database" backend for preference storage, it is possible to write code that retrieves the individual users' "identities" preferences (they are seriali

Re: [imp] Trouble with email addresses containing empty domain labels

2018-02-02 Thread Jens Wahnes
Jens Wahnes wrote: Jens Wahnes wrote: Jan Schneider wrote: I was able to track this down to Horde_Idna. The error will be catched in Horde_Idna 1.1.0 and displayed smarter in IMP 6.2.18. I looked into this again today. Even though I have got the new versions installed (both Horde_Idna 1.1.0

Re: [imp] Support question/possible bug report on ActiveSync

2017-12-13 Thread Jens Wahnes
Wolfgang Borgsmüller wrote: - CPU usage spikes to 99% and I get this error message in apache log: Fatal error:  Allowed memory size of 268435456 bytes exhausted (tried to allocate 72 bytes) in /usr/share/php/Math/BigInteger.php on line 1089 (full stack trace below) So my guess is: there must

Re: [imp] New IMAP server, troubleshooting slow IMP performance

2017-07-26 Thread Jens Wahnes
Simon Wilson wrote: $servers['imap']['cache'] = sql; I just switched it to nosql to use the mongo nosql setup on the server that is used for Horde cache - and the email times have dropped to about 0.5s. Thanks Jan, that was the ticket. I think nosql is probably better performance anyway?

Re: [imp] unix usernames

2017-07-12 Thread Jens Wahnes
Maurício José T. Tecles wrote: Citando ESSAISSI : my email server uses unix usernames, hence, my username for smtp is in my case remi, and for imap too actually so when i try to send an email, imp complains about not having a domain name in my usename for sending -- i try to send to a regu

Re: [imp] Message form when replying

2017-07-11 Thread Jens Wahnes
poubel...@free.fr wrote: Do anyone have a clue on this and can help me to get the cursor at the top of the message as well as the signature? The Horde developers have previously stated they do not approve of "answer before question" style emails and thus Imp allows the signature to be placed

Re: [imp] Question Marks and Carriage Returns...

2017-07-11 Thread Jens Wahnes
cjdl01 wrote: It seems that when we receive an email that is html (or html and text) from *some* people, the email looks fine, until we hit the "Reply" button in imp. Then the message suddenly is injected with a bunch of extra carriage returns and lines with nothing but a question mark on them

Re: [imp] Weird behavioh while using multiple identities

2017-06-22 Thread Jens Wahnes
leona...@cefetmg.br wrote: The combination 'tieto_addr'='i...@example.com', 'from_addr'='', 'replyto_addr'='' works well (I mean, one replying messages from 'i...@example.com' will get 'i...@example.com' in 'To:' field). Any other combination will result in an empty 'To:' field. I'll have to

Re: [imp] Weird behavioh while using multiple identities

2017-06-20 Thread Jens Wahnes
Leonardo Bruno wrote: A hypothetical IT guy 'jhon...@example.com' open a new message window, chose 'From:' field as 'i...@example.com' and send a message to 'jane...@example.com', a user of the same LDAP/Dovecot/Postfix/Horde ecosystem that 'jhon...@example.com' and 'i...@example.com' belong to

Re: [imp] Trouble with email addresses containing empty domain labels

2017-04-06 Thread Jens Wahnes
Jens Wahnes wrote: Jan Schneider wrote: I was able to track this down to Horde_Idna. The error will be catched in Horde_Idna 1.1.0 and displayed smarter in IMP 6.2.18. I looked into this again today. Even though I have got the new versions installed (both Horde_Idna 1.1.0 and IMP 6.2.18), I

Re: [imp] Trouble with email addresses containing empty domain labels

2017-03-28 Thread Jens Wahnes
Jan Schneider wrote: I was able to track this down to Horde_Idna. The error will be catched in Horde_Idna 1.1.0 and displayed smarter in IMP 6.2.18. I looked into this again today. Even though I have got the new versions installed (both Horde_Idna 1.1.0 and IMP 6.2.18), I still seem to get t

Re: [imp] Unable to send mail (ERROR : "Address is missing domain")

2017-03-14 Thread Jens Wahnes
Anand Palani wrote: 2). what my problem is , when i am login into horde & IMP using my ldap username (Ex : anand) i am able to login, when i am send mail but I couldn't send mail (ERROR : "Address is missing domain"). AFAICS there are two things to consider in this case: Is the 'maildomain'

[imp] Saving of sent attachments in Smartmobile view

2017-01-26 Thread Jens Wahnes
Hi, it seems that when in Smartmobile mode, Imp does not honor the "save_attachments" preference. That is, even with "save_attachments" set to "never", Imp will save attachments to the "Sent" folder if the mail containing the attachment was sent from Smartmobile mode. The same goes for the m

Re: [imp] Trouble with email addresses containing empty domain labels

2017-01-25 Thread Jens Wahnes
Am 24.01.2017 um 11:38 schrieb Jan Schneider: I was able to track this down to Horde_Idna. The error will be catched in Horde_Idna 1.1.0 and displayed smarter in IMP 6.2.18. Thanks for looking into this. I'm looking forward to the new versions. Jens smime.p7s Description: S/MIME Cryptogr

[imp] Trouble with email addresses containing empty domain labels

2017-01-20 Thread Jens Wahnes
Hi, with current stable version of Imp (6.2.17) and Horde_Smtp (1.9.4), we are seeing problems with emails that are to be sent to addresses that appear to be invalid, as they contain two adjacent dots and thus an empty "label" (at least that's what I would call this in DNS vocabulary). To ma

Re: [imp] Shift-delete feature request

2015-11-30 Thread Jens Wahnes
On Mon, Nov 30 2015, at 16:40:43 +0100, Jan Schneider wrote: > You can expunge individual messages too, and we already have a method > argument in IMP's API to delete and purge individual message. So it > should be rather simple to implement (keyhandler, AJAX API method, help > text). Ah, I

Re: [imp] IMAP sessions not starting correctly

2015-11-27 Thread Jens Wahnes
Hi, Am 25.11.2015 um 11:33 schrieb Michael Menge: We have seen a similar problem on our servers that might be related: We have sporadic cases where user are able to login to horde, but are than unable to access there mails in IMP because "Mail server denied authentication". Yes, that's the me

Re: [imp] Shift-delete feature request

2015-11-27 Thread Jens Wahnes
On Fri, Nov 27 2015, at 11:04:08 +0100, Simon B wrote: > It's odd, because I thought I had advanced settings shown by default. AFAIK, showing the advanced prefs can only be enabled for a specific session, but not permanently. > However, I'd still like the ability to permanently delete mail from

Re: [imp] Shift-delete feature request

2015-11-26 Thread Jens Wahnes
On Thu, Nov 26 2015, at 17:40:02 +0100, Simon B wrote: > On 25 Nov 2015 8:54 pm, "Jens Wahnes" wrote: > > On Wed, Nov 25 2015, at 20:12:16 +0100, Simon B wrote: > > > It would be great if deleting an email (I.e. moving it to trash) would > mark > > > it as

Re: [imp] Shift-delete feature request

2015-11-25 Thread Jens Wahnes
On Wed, Nov 25 2015, at 20:12:16 +0100, Simon B wrote: > It would be great if deleting an email (I.e. moving it to trash) would mark > it as read as well. There's pref for that, it's called "delete_mark_seen". Jens signature.asc Description: Digital signature -- imp mailing list Frequently A

[imp] IMAP sessions not starting correctly

2015-11-24 Thread Jens Wahnes
We're using Horde along with the IMAP Proxy originally developed for the Squirrelmail project. While this works out quite well most of the time, there are, however, occasional problems with IMAP sessions not working properly. In the IMAP proxy's log file, there would be a line reading "IMAP_L

Re: [imp] Folder names with tilde character

2015-11-20 Thread Jens Wahnes
On Thu, Nov 19 2015, at 22:28:35 +0100, Jan Schneider wrote: > http://github.com/horde/horde/commit/2cc3963358d08fe180db41a0bdeb2b7844bf47ac Many thanks to both of you! I tried that code and, so far, it works very well. Could it be that the comment in the source code has a typo? Shouldn't it r

[imp] Folder names with tilde character

2015-11-18 Thread Jens Wahnes
One of our users created a folder with a tilde ("~") character within the folder name. This kind of folder name is not handled correctly. When the folder is shown in the folder list, the tilde character is silently dropped. For instance, if a folder by the name of "~tilde~" is created, it is

Re: [imp] message selection in imp

2015-07-21 Thread Jens Wahnes
Michael Menge wrote: We recently switched from horde 3.3 to horde 5.2, so the new dynamic interface is new to our users. On the one hand, there are always users that don't like the changes and want to keep the old. On the other hand, the reports indicate that the horde/imp did not work in the wa

Re: [imp] message selection in imp

2015-07-20 Thread Jens Wahnes
On Mo, Jul 20 2015, at 19:59:02 +0200, Michael Menge wrote: > If no message is selected but one is shown (preview) actions like delete > should work on the shown message. Maybe you can convince your users to double-click such a message first. When it is shown in a new window, the delete button i

[imp] Behavior of the virtual trash folder

2015-06-29 Thread Jens Wahnes
Hi, some of our users are using the "Use Virtual Trash" setting in IMP's "Deleting and Moving Messages" section and have had trouble using it effectively. Now I wonder how that virtual trash folder is supposed to work. When using that setting, messaged marked as deleted are shown in the Virtual

[imp] Trouble with redirecting mails

2015-05-28 Thread Jens Wahnes
Using the latest stable version of IMP (6.2.8), I'm experiencing several problems when using the "Redirect" function. If I use the "Mobile (Smartphone/Tablet)" mode, open up a message and click on More / Redirect, I'm able to enter an address to which the message should be redirected. However, w

Re: [imp] Mnemo stopped working after last upgrade

2015-02-13 Thread Jens Wahnes
On Thu, Feb 12 2015, at 12:01:34 +0100, Jan Schneider wrote: > Zitat von Jens Wahnes : >> On Thu, Feb 12 2015, at 10:12:39 +0100, Jan Schneider wrote: >>> Zitat von Jens Wahnes : >>>> On Wed, Feb 11 2015, at 10:41:40 -0500, Michael J Rubinsky wrote: >>>>

Re: [imp] Mnemo stopped working after last upgrade

2015-02-12 Thread Jens Wahnes
On Thu, Feb 12 2015, at 10:12:39 +0100, Jan Schneider wrote: > Zitat von Jens Wahnes : >> On Wed, Feb 11 2015, at 10:41:40 -0500, Michael J Rubinsky wrote: >>> Quoting Jens Wahnes : >>>> Don't know if these are related, but I'm having trouble since tod

Re: [imp] Mnemo stopped working after last upgrade

2015-02-12 Thread Jens Wahnes
On Wed, Feb 11 2015, at 10:41:40 -0500, Michael J Rubinsky wrote: > Quoting Jens Wahnes : >> Don't know if these are related, but I'm having trouble since today's >> update even after applying the above patch. When trying to login after >> the upgrade,

Re: [imp] Mnemo stopped working after last upgrade

2015-02-11 Thread Jens Wahnes
On Tue, Feb 10 2015, at 19:17:14 +0100, Jens Wahnes wrote: > Don't know if these are related, but I'm having trouble since today's > update even after applying the above patch. When trying to login after > the upgrade, the following message appears in the browser: As th

Re: [imp] Mnemo stopped working after last upgrade

2015-02-10 Thread Jens Wahnes
On Tue, Feb 10 2015, at 11:44:16 -0500, Michael J Rubinsky wrote: > Quoting azurIt : >> Mnemo suddenyl stopped working after last upgrade of IMP and few >> libraries (don't remember them). When i try to open it, this error is >> displayed: >> http://pastebin.com/zrNPgtPR >> I don't have Nag i