0005733: Links with '&' as a field separator in the query parameters get corrupted. - SOGo

ID	Project	Category	View Status	Date Submitted	Last Update

0005733	SOGo	Web Mail	public	2023-04-07 09:37	2023-04-24 16:34

Reporter	tcavignac	Assigned To
Priority	normal	Severity	major	Reproducibility	always
Status	new	Resolution	open
Platform	Client web	OS	Windows	OS Version	10
Product Version	3.2.10

Summary	0005733: Links with '&' as a field separator in the query parameters get corrupted.
Description	When receiving a mail with a link containing an '&' as a field separator in the query part of the URL, the web client wrongly escape the ampersand into to HTML entity '&' causing the link to be broken.
Steps To Reproduce	Basically any mail link of the form https://example.com/?param1=42&param2=23 seems to reproduce. I attached the a mail I just sent myself from a gmail client to my SOGo client (with personal data removed of course). The bug appears when reading the mail from SOGo but not when reading it from thunderbird.
Additional Information	Unfortunately, I am just a user of the service, so I have no way of forcing an update of the client to a more recent version.
Tags	No tags attached.

tcavignac 2023-04-07 09:37 reporter	Broken link test.eml (560 bytes) MIME-Version: 1.0 From: EDITED Date: Fri, 7 Apr 2023 11:29:45 +0200 Message-ID: EDITED Subject: Broken link test To: EDITED Content-Type: multipart/alternative; boundary="000000000000e3a88905f8bba64a" --000000000000e3a88905f8bba64a Content-Type: text/plain; charset="UTF-8" Sending a link <https://example.com/?param1=42&param2=23> --000000000000e3a88905f8bba64a Content-Type: text/html; charset="UTF-8" <div dir="ltr">Sending a <a href="https://example.com/?param1=42&param2=23">link</a><br></div> --000000000000e3a88905f8bba64a-- Broken link test.eml (560 bytes)

tcavignac 2023-04-07 09:39 reporter ~0016815	Funnily enough, the link has been modified in my report too, so that I guess the same mechanism is at play.

sebastien 2023-04-24 16:34 administrator ~0016870	This related to CKEditor (https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#cfg-forceSimpleAmpersand) tried this option unfortunately it doesn't fix the issue. Looking forward Sebastien

Date Modified	Username	Field
2023-04-07 09:37	tcavignac	New Issue
2023-04-07 09:37	tcavignac	File Added: Broken link test.eml
2023-04-07 09:39	tcavignac	Note Added: 0016815
2023-04-24 16:34	sebastien	Note Added: 0016870