View Issue Details

IDProjectCategoryView StatusLast Update
0006152SOGoWeb Mailpublic2025-10-15 14:16
ReporterVitaly Assigned Toqhivert  
PrioritynormalSeverityminorReproducibilityalways
Status feedbackResolutionopen 
Platform[Client] MicrosoftOSWindowsOS Version8
Product Version5.12.3 
Summary0006152: Incorrect display of signature with SVG image.
Description

When creating a signature with an attached SVG image in base64 format, it displays correctly in the signature editor and in the new message editor. After sending, the image appears as an empty rectangle and an attached file in both sent and received messages.

Steps To Reproduce

Mail Preferences -> IMAP ACCOUNTS -> Edit -> Identities -> Source -> Copy and paste text located at the end -> OK -> Save
Mail -> Write a new message -> Insert signature -> Add recipients and subject -> Send email
Check email in Sent folder

<p>
Test signature
</p>
<p>
<img src="data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBzdGFuZGFsb25lPSJubyI/Pgo8IURPQ1RZUEUgc3ZnIFBVQkxJQyAiLS8vVzNDLy9EVEQgU1ZHIDEuMS8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9HcmFwaGljcy9TVkcvMS4xL0RURC9zdmcxMS5kdGQiPgo8c3ZnIHdpZHRoPSI3OTJweCIgaGVpZ2h0PSI0NjRweCIgdmVyc2lvbj0iMS4xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4bWw6c3BhY2U9InByZXNlcnZlIiBzdHlsZT0iZmlsbC1ydWxlOmV2ZW5vZGQ7Y2xpcC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjEuNDE0MjE7Ij4KICAgIDxnPgogICAgICAgIDxnPgogICAgICAgICAgICA8Zz4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik02NDMuNzExLDE0NC45MzhDNjMzLjg0OSwxNDQuOTM4IDYyNi44NDcsMTM3LjcyMSA2MjYuODQ3LDEyOC4wMzVDNjI2Ljg0NywxMTguMzQxIDYzMy44NDksMTExLjEyMyA2NDMuNzExLDExMS4xMjNDNjUzLjY1LDExMS4xMjMgNjYwLjY1MiwxMTguMzQxIDY2MC42NTIsMTI4LjAzNUM2NjAuNjUyLDEzNy43MjEgNjUzLjY1LDE0NC45MzggNjQzLjcxMSwxNDQuOTM4Wk02NDMuNjgxLDk0LjU4MzVDNjI0LjE1NCw5NC41ODM1IDYxMC4yODgsMTA4Ljg2MSA2MTAuMjg4LDEyOC4wMzVDNjEwLjI4OCwxNDcuMiA2MjQuMTU0LDE2MS40NzggNjQzLjY4MSwxNjEuNDc4QzY2My4zMzUsMTYxLjQ3OCA2NzcuMjAyLDE0Ny4yIDY3Ny4yMDIsMTI4LjAzNUM2NzcuMjAyLDEwOC44NjEgNjYzLjMzNSw5NC41ODM1IDY0My42ODEsOTQuNTgzNVpNNjQzLjY1MiwxNzguODExQzYxNC4wMTksMTc4LjgxMSA1OTIuOTY1LDE1Ny4xMyA1OTIuOTY1LDEyOC4wMzVDNTkyLjk2NSw5OC45MzE1IDYxNC4wMTksNzcuMjYwMiA2NDMuNjUyLDc3LjI2MDJDNjczLjQ4LDc3LjI2MDIgNjk0LjUyNSw5OC45MzE1IDY5NC41MjUsMTI4LjAzNUM2OTQuNTI1LDE1Ny4xMyA2NzMuNDgsMTc4LjgxMSA2NDMuNjUyLDE3OC44MTFaTTY0My42MTMsNTguNDg3NkM2MDMuMDMyLDU4LjQ4NzYgNTc0LjIxMiw4OC4xNzkxIDU3NC4yMTIsMTI4LjAzNUM1NzQuMjEyLDE2Ny44ODIgNjAzLjAzMiwxOTcuNTY0IDY0My42MTMsMTk3LjU2NEM2ODQuNDU4LDE5Ny41NjQgNzEzLjI4OCwxNjcuODgyIDcxMy4yODgsMTI4LjAzNUM3MTMuMjg4LDg4LjE3OTEgNjg0LjQ1OCw1OC40ODc2IDY0My42MTMsNTguNDg3NlpNMTU3LjQ5MiwxODIuODM2TDEzNi42NTMsMTc3Ljg3MUMxMTcuNjg0LDE3My41MTMgMTA4LjA0OCwxNjguNTM4IDEwOC4wNDgsMTU0Ljg1OEMxMDguMDQ4LDEzOS4zMDcgMTIzLjkwMywxMzMuMDc5IDEzOC4yMSwxMzMuMDc5QzE1Mi43NTIsMTMzLjA3OSAxNjMuMzc3LDE0MC4zNDUgMTY5LjYzNSwxNTEuNjU2QzE2OS42NTQsMTUxLjcwNCAxNjkuNjg0LDE1MS43NTMgMTY5LjcyMywxNTEuODEyQzE2OS44NSwxNTIuMDU3IDE2OS45OTcsMTUyLjI5MiAxNzAuMTI0LDE1Mi41MzdMMTcwLjE1NCwxNTIuNTE3QzE3Mi4xMjIsMTU1LjQ5NCAxNzUuNDMyLDE1Ny40ODIgMTc4Ljk5NywxNTcuNDgyQzE4NS4wNjgsMTU3LjQ4MiAxODkuNDY1LDE1My4wOTUgMTg5LjQ2NSwxNDcuMDI0QzE4OS40NjUsMTQ0LjcwMyAxODguOTY2LDE0Mi4yNDUgMTg3Ljg3OSwxNDAuMzk0QzE3Ny4yMDUsMTIyLjI0OCAxNTkuNjA3LDExNC40MjQgMTM5LjQ1NCwxMTQuNDI0QzExMi4wOTMsMTE0LjQyNCA4NS42NTI0LDEyOC4xMDQgODUuNjUyNCwxNTguMjY2Qzg1LjY1MjQsMTg1Ljk1IDExMy4wMjMsMTk0LjAzOCAxMjIuOTcyLDE5Ni41MTZMMTQyLjg3MSwyMDEuMTg3QzE1OC4xMDksMjA0LjkxOCAxNzAuNTQ2LDIwOS45MDMgMTcwLjU0NiwyMjQuNTA0QzE3MC41NDYsMjQxLjI5OCAxNTMuMTM0LDI0OC43NyAxMzYuMzQsMjQ4Ljc3QzExOS4yNDEsMjQ4Ljc3IDEwNi41NzksMjQwLjAyNSA5Ny44NTQxLDIyNy4xMThMOTcuODQ0MywyMjcuMTE4Qzk1LjkwNTQsMjI0LjI4OCA5Mi44OTksMjIyLjMgODkuMjE2OSwyMjIuM0M4My4yODI2LDIyMi4zIDc4LjUwMzcsMjI3LjE3NyA3OC43MTkxLDIzMy4xMDJDNzguODE3MSwyMzUuNTIgNzkuNjIwMSwyMzcuNTY3IDgwLjg1NCwyMzkuMzJDOTQuNTI0NiwyNTkuNzc3IDExNC4yOTYsMjY3LjQyNSAxMzYuMzQsMjY3LjQyNUMxNjQuNjQxLDI2Ny40MjUgMTkyLjk0MiwyNTQuMzYyIDE5Mi45NDIsMjIyLjY0M0MxOTIuOTQyLDIwMi4xMjcgMTc3LjcwNCwxODcuNTA3IDE1Ny40OTIsMTgyLjgzNlpNMjk2LjYxNywyNDguNjgyQzI2My4wMzgsMjQ4LjY4MiAyNDEuODg2LDIyMy40OTUgMjQxLjg4NiwxOTAuODQ2QzI0MS44ODYsMTU4LjE4NyAyNjMuMDM4LDEzMyAyOTYuNjE3LDEzM0MzMzAuNTIsMTMzIDM1MS42NjIsMTU4LjE4NyAzNTEuNjYyLDE5MC44NDZDMzUxLjY2MiwyMjMuNDk1IDMzMC41MiwyNDguNjgyIDI5Ni42MTcsMjQ4LjY4MlpNMjk2LjYxNywxMTQuMzQ1QzI1MS41MzEsMTE0LjM0NSAyMTkuNDk5LDE0Ni45OTQgMjE5LjQ5OSwxOTAuODQ2QzIxOS40OTksMjM0LjY4OCAyNTEuNTMxLDI2Ny4zMzcgMjk2LjYxNywyNjcuMzM3QzM0Mi4wMTYsMjY3LjMzNyAzNzQuMDQ4LDIzNC42ODggMzc0LjA0OCwxOTAuODQ2QzM3NC4wNDgsMTQ2Ljk5NCAzNDIuMDE2LDExNC4zNDUgMjk2LjYxNywxMTQuMzQ1Wk01MTQuOTg1LDIzMi44MThDNTE0LjIyMSwyMzMuNTUyIDUxMy40NDgsMjM0LjI3NyA1MTIuNjA2LDIzNC45NzJDNTExLjUwOSwyMzUuOTgxIDUxMC4yMzYsMjM3LjA2OCA1MDguNzg2LDIzOC4xNTVDNTAwLjAzMiwyNDQuNDkxIDQ4OC45NzYsMjQ4LjE2MyA0NzYuMDQ5LDI0OC4xNjNDNDQyLjQ2LDI0OC4xNjMgNDIxLjMxOCwyMjIuOTc2IDQyMS4zMTgsMTkwLjMyN0M0MjEuMzE4LDE1Ny42NjggNDQyLjQ2LDEzMi40ODEgNDc2LjA0OSwxMzIuNDgxQzUwOS45NDIsMTMyLjQ4MSA1MzEuMDg0LDE1Ny42NjggNTMxLjA4NCwxOTAuMzI3QzUzMS4wODQsMjA3LjM3NiA1MjUuMzE2LDIyMi4zNjkgNTE0Ljk4NSwyMzIuODE4Wk00NjQuNzk3LDMxNS43MzNDNDY3LjMwNCwzMTUuNzMzIDQ2OS44OTksMzE1LjU2NiA0NzIuNTkyLDMxNS4yMzNDNDc3LjU2NywzMTQuNjA3IDQ4Mi4xMDEsMzE0LjMzMiA0ODYuMjA0LDMxNC4zMzJDNTA1LjI4MSwzMTQuNDQgNTE0Ljk5NSwzMTkuOTgzIDUyMC44NTEsMzI2LjM4N0M1MjYuNjk3LDMzMi44MzEgNTI4Ljk1LDM0MS41NjYgNTI4Ljk0LDM0OC45ODlDNTI4Ljk1LDM1Mi41NDQgNTI4LjM5MSwzNTUuNzI2IDUyNy43NzQsMzU3LjYzNkM1MjQuODU2LDM2Ni40ODggNTE4Ljk2MSwzNzIuNTExIDUwOS45MzIsMzc3LjA0NUM1MDAuOTcyLDM4MS40OTEgNDg5LjAxNSwzODMuNzYzIDQ3Ni41MSwzODMuNzQzQzQ3Mi4wMzQsMzgzLjc0MyA0NjcuNDgxLDM4My40NTkgNDYyLjk4NiwzODIuOTIxQzQ1NC40ODYsMzgxLjk0MSA0NDMuMjQ0LDM3OC4yODkgNDM1LjA5NiwzNzEuOTIzQzQzMC45OTMsMzY4Ljc1MSA0MjcuNjE0LDM2NC45OSA0MjUuMjM1LDM2MC41MzRDNDIyLjg3NSwzNTYuMDU5IDQyMS40MDYsMzUwLjg2OSA0MjEuMzk2LDM0NC4yM0w0MjEuMzk2LDM0My40OTVDNDIxLjY1MSwzMzEuMjU0IDQyNy4yNzIsMzIzLjEyNiA0MzMuNDMxLDMxNy4yMjFDNDM2LjQ3NywzMTQuMzQyIDQzOS42MTEsMzEyLjE5OCA0NDEuODkyLDMxMC44MzZDNDQyLjI1NSwzMTAuNjIxIDQ0Mi41OTcsMzEwLjQyNSA0NDIuOTExLDMxMC4yNDlDNDQ4Ljk1MywzMTMuODIzIDQ1Ni40NTQsMzE1Ljc2MiA0NjQuNzk3LDMxNS43MzNaTTQ3Ni4wNDksMTEzLjgyNkM0MzAuOTY0LDExMy44MjYgMzk4LjkyMiwxNDYuNDc1IDM5OC45MjIsMTkwLjMyN0MzOTguOTIyLDIxOS45NiA0MTMuNTYyLDI0NC40NjEgNDM2Ljk3NiwyNTcuMjQxQzQzNi42NjMsMjU3LjU1NCA0MzYuMzU5LDI1Ny44NzcgNDM2LjA2NiwyNTguMkM0MzAuMDE0LDI2NC44MyA0MjYuOTE5LDI3My4zMiA0MjYuOTA5LDI4MS45MDlDNDI2LjksMjg1LjY5OCA0MjcuNTI2LDI4OS41ODYgNDI4Ljg2OCwyOTMuMzA3QzQyNS44MzIsMjk1LjI0NiA0MjIuMjA5LDI5Ny45IDQxOC40OTcsMzAxLjM4NkM0MDkuNTQ3LDMwOS43MiAzOTkuOTIxLDMyMy43MzMgMzk5LjYzNywzNDMuMTIzQzM5OS42MjcsMzQzLjU3MyAzOTkuNjI3LDM0My45NDYgMzk5LjYyNywzNDQuMjNDMzk5LjYxNywzNTQuMjE4IDQwMS45ODcsMzYzLjIyNyA0MDYuMDMxLDM3MC43NzhDNDEyLjExMywzODIuMTQ3IDQyMS41ODIsMzkwLjA1OSA0MzEuMzU1LDM5NS4zMzhDNDQxLjE4Nyw0MDAuNjI2IDQ1MS40NCw0MDMuNDM2IDQ2MC4zODEsNDA0LjUzM0M0NjUuNzA4LDQwNS4xNyA0NzEuMTE0LDQwNS41MTIgNDc2LjUxLDQwNS41MTJDNDkxLjUzMiw0MDUuNDkzIDUwNi41MTQsNDAyLjk1NyA1MTkuNTQ5LDM5Ni41NzJDNTMyLjUyNCwzOTAuMjg1IDU0My42NzgsMzc5LjQ2NCA1NDguNDk2LDM2NC4yODVDNTQ5LjkyNiwzNTkuNzcxIDU1MC42ODksMzU0LjY0OSA1NTAuNzA5LDM0OC45ODlDNTUwLjY4OSwzMzcuNDkyIDU0Ny4zODksMzIzLjQ0OSA1MzcuMDU4LDMxMS44NTVDNTI2LjcyNywzMDAuMjIxIDUwOS42MzgsMjkyLjQ1NSA0ODYuMjA0LDI5Mi41NjNDNDgxLjExMiwyOTIuNTYzIDQ3NS42ODcsMjkyLjkxNiA0NjkuOTE5LDI5My42M0M0NjguMDU4LDI5My44NTYgNDY2LjM1NCwyOTMuOTYzIDQ2NC43OTcsMjkzLjk2M0M0NTcuNjE5LDI5My45MTUgNDU0LjAxNiwyOTEuOTI3IDQ1MS44NzEsMjg5Ljg5OUM0NDkuNzU2LDI4Ny44MzMgNDQ4LjY5OCwyODUuMTAxIDQ0OC42NjksMjgxLjkwOUM0NDguNjU5LDI3OC42NTcgNDQ5Ljk0MiwyNzUuMjQgNDUyLjEwNiwyNzIuOTA5QzQ1NC4zMTksMjcwLjU5OCA0NTcuMDcxLDI2OS4wMzEgNDYxLjg2OSwyNjguOTcyQzQ2Mi4zLDI2OC45NzIgNDYyLjc2MSwyNjguOTgyIDQ2My4yMzEsMjY5LjAyMUM0NjYuMzA2LDI2OS4yMzcgNDY5LjI5MiwyNjkuMzQ1IDQ3Mi4xOTEsMjY5LjM0NUM0OTYuMTczLDI2OS4zOTMgNTE0LjIxMiwyNjEuOTYxIDUyNi40ODIsMjUxLjczN0M1MzguNzkxLDI0MS41MTQgNTQ1LjI5NCwyMjkuMDc3IDU0OC4zNjksMjE5LjI1NUw1NDguMzI5LDIxOS4yNDVDNTUxLjY2OSwyMTAuNDIyIDU1My40OCwyMDAuNjg4IDU1My40OCwxOTAuMzI3QzU1My40OCwxNDYuNDc1IDUyMS40NDgsMTEzLjgyNiA0NzYuMDQ5LDExMy44MjZaIiBzdHlsZT0iZmlsbDpyZ2IoODAsMTg5LDU1KTtmaWxsLXJ1bGU6bm9uemVybzsiLz4KICAgICAgICAgICAgPC9nPgogICAgICAgIDwvZz4KICAgIDwvZz4KPC9zdmc+Cg==" width="391" height="232">
</p>

Additional Information

The received email is displayed normally in many other web interfaces

TagsNo tags attached.

Activities

qhivert

qhivert

2025-10-15 14:16

administrator   ~0018355

Hello,
From what i'm reading, this is on purposed because SVG file can have executable code (javascript) so it's to avoid reading scammer scripts.

Issue History

Date Modified Username Field Change
2025-10-10 09:59 Vitaly New Issue
2025-10-15 14:16 qhivert Note Added: 0018355
2025-10-15 14:16 qhivert Assigned To => qhivert
2025-10-15 14:16 qhivert Status new => feedback