[Bug 8337] SpamAssassin creates malformed X-Ham-Report header (Content preview) with unescaped Unicode BOM
| Newsgroups | gmane.mail.spam.spamassassin.devel |
|---|---|
| Message-ID | <[email protected]/SpamAssassin/> |
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8337 lurkertech <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #1 from lurkertech <[email protected]> --- Seems plausible that this might also be a security issue, if there is some way of exploiting vulnerabilities in mail handlers by being able to insert arbitrary Unicode characters in an SMTP header (not sure if there is, but seems likely given how many other Unicode-related hacks there are). Should this be marked security component? -- You are receiving this mail because: You are the assignee for the bug.