[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Nmh-workers] mhshow: invalid QUOTED-PRINTABLE encoding
From: |
Valdis . Kletnieks |
Subject: |
Re: [Nmh-workers] mhshow: invalid QUOTED-PRINTABLE encoding |
Date: |
Mon, 20 Mar 2006 12:08:38 -0500 |
On Mon, 20 Mar 2006 10:33:40 EST, Paul Fox said:
> i believe there was consensus that a) this behavior was a result
> of a problem with the original content encoding, and that b) the
> nmh decoder should be more tolerant when decoding, and simply
> pass mis-codings through untouched.
I'd have to think *real* hard about that. I suspect that passing mis-codings
through without a complaint is possibly setting us up for a nasty security
exposure. I'm not convinced that it isn't possible to create an intentional
bad encoding that causes issues further down the line.
pgpaWjVyW73ja.pgp
Description: PGP signature
Re: [Nmh-workers] mhshow: invalid QUOTED-PRINTABLE encoding, pmaydell, 2006/03/20
Re: [Nmh-workers] mhshow: invalid QUOTED-PRINTABLE encoding, Joel Uckelman, 2006/03/20